Security Test: Resource limiting bypass¶

Description¶

Default Severity: high

Resource limiting bypass happens when an endpoint lets a client request more data than it should, usually because there's no proper check on the maximum allowed. This means that if someone deliberately requests huge amounts of data, it can overwhelm your system, slow it down, or even crash the server, leading to a denial of service. Often developers simply forget to set clear limits or rely too much on pagination without upper bounds. Without proper limits, your system becomes easy prey for attackers aiming to exhaust resources and disrupt your service.

Configuration¶

Identifier: resource_limitation/resource_limiting_bypass

Examples¶

All configuration available:

checks:
  resource_limitation/resource_limiting_bypass:
    skip: false # default

Compliance and Standards¶