Security Test: Server Error¶

Description¶

Default Severity: high

These errors happen when something goes wrong on the server side—like a misconfiguration or a bug—that wasn’t caught during development. They’re dangerous because they can reveal hints about how your system is set up or provide attackers with ways to probe for even bigger vulnerabilities. If these errors keep happening, users might lose trust in your platform and attackers could potentially exploit the underlying issues to disrupt service or get access to sensitive data. A common mistake is not handling all possible error scenarios or neglecting proper logging and monitoring, which not only lets these errors slip by unnoticed but also makes it harder to diagnose and fix the real problem.

Configuration¶

Identifier: protocol/server_error

Examples¶

All configuration available:

checks:
  protocol/server_error:
    skip: false # default

Compliance and Standards¶