Multiple HREFs Redirect Detected (Potential Sensitive Information Leak)

• Risk:

• Low

• Type:
• Passive

• CWE:
• CWE-201

Summary

The server has responded with a redirect that seems to contain multiple links. This may indicate that although the server sent a redirect it also responded with body content links (which may include sensitive details, PII, lead to admin panels, etc.).

Solution

Ensure that no sensitive information is leaked via redirect responses. Redirect responses should have almost no content.

Other info

The response contained 3 occurrences of "HREF".

Free online web security scanner