Security Test: Request URL Override¶

Description¶

Default Severity: high

Request URL Override vulnerabilities occur when an application allows attackers to manipulate the target URL by injecting headers such as X-Original-URL or X-Rewrite-URL. These headers can override the intended URL used in a request, leading to unauthorized access to resources, bypassing of security controls, or redirection to malicious sites. Such vulnerabilities often arise when applications rely on client-supplied headers to determine the target URL without proper validation or sanitization. Failure to enforce strict URL validation can result in security breaches, data leaks, or phishing attacks.

Reference:

• https://symfony.com/blog/cve-2018-14773-remove-support-for-legacy-and-risky-http-headers

Configuration¶

Identifier: configuration/request_url_override

Examples¶

All configuration available:

checks:
  configuration/request_url_override:
    skip: false # default
    options:
      skip_objects: # cf. Options below

Options¶

Options can be set in the options key of the Security Test Configuration.

Compliance and Standards¶