Access Control: Nginx Virtual Host Traffic Status Module - Cross-Site Scripting¶

Identifier: nginx_module_vts_xss

Scanner(s) Support¶

Description¶

Nginx Virtual Host Traffic Status Module contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks.

Reference:

• https://github.com/vozlt/nginx-module-vts

Configuration¶

Example¶

Example configuration:

---
security_tests:
  nginx_module_vts_xss:
    skip: false

Reference¶

skip¶

Type : boolean

Skip the test if true.