Skip to content

Security Test: Server Error via Frontend

Description

Default Severity:

A Server Error usually means something went wrong on your end, like a bug or misconfiguration, leading to unexpected crashes or error messages. If these errors aren’t managed properly, they can unintentionally reveal details about your system that attackers might use to figure out weaknesses, potentially leading to service disruptions or unauthorized access to sensitive data. Often, developers might not cover every possible error or fail to properly log and monitor issues, making it even harder to detect and fix problems before they become serious risks.

Configuration

Identifier: frontend_protocol/server_error

Examples

All configuration available:

checks:
  frontend_protocol/server_error:
    skip: false # default

Compliance and Standards

Standard Value
OWASP API Top 10 API5:2023
OWASP LLM Top 10 LLM04:2023
PCI DSS 6.5.5
GDPR Article-32
SOC2 CC1
PSD2 Article-95
ISO 27001 A.12.6
NIST SP800-53
FedRAMP AC-2
CWE 20
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:H/RL:O/RC:C
CVSS Score 8.7