Majority response status codes 3XX

firetail:majority-status-code-300

Type:

Detection

Rule Severity:

Info

Over half of an API's response status codes over a given time period were in the 3XX range.

‍

‍

Remediation

Investigate the API to verify if it should be returning a majority of responses with 3XX status codes.

Example Attack Scenario

How to Identify with Example Scenario

How to Resolve with Example Scenario

How to Identify with Example Scenario

Find the text in bold to identify issues such as these in API specifications

How to Resolve with Example Scenario

Modify the text in bold to resolve issues such as these in API specifications
References:

More findings

All Findings
Average request payload size reduced
Malformed media type
AWS ALB not configured to drop invalid HTTP headers
Missing global security
Undefined integer format
AWS ALB should redirect HTTP to HTTPS