Skip to content

Sensitive Data: Twonky Server - Exposure

Identifier: twonky_server_exposure

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner

Description

Twonky Server is a media server software that allows streaming of multimedia content over DLNA/UPnP protocols. When exposed to the internet or an untrusted network without proper authentication or access restrictions, it may allow unauthorized users to browse and access media files, interact with server settings, or gather sensitive network information.

Reference:

Configuration

Example

Example configuration:

---
security_tests:
  twonky_server_exposure:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference

assets_allowed

Type : List[AssetType]*

List of assets that this check will cover.

skip

Type : boolean

Skip the test if true.