diff --git a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/descriptive_stack_trace/template.md b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/descriptive_stack_trace/template.md index e9558ffc..a35691cd 100644 --- a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/descriptive_stack_trace/template.md +++ b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/descriptive_stack_trace/template.md @@ -4,12 +4,13 @@ The descriptive stack trace leaked by this application shows versions of softwar **Business Impact** -This vulnerability can impact customers’ trust in the application which can result in reputational damage for the business and indirect financial losses. +This vulnerability could enable attacker exploitation that will disrupt product or service availability, +leading to financial loss and impact customers’ trust in the application. **Steps to Reproduce** 1. Use a browser to navigate to: {{URL}} -1. Observe detailed error message showing a descriptive stack trace +2. Observe detailed error message showing a descriptive stack trace **Proof of Concept (PoC)** diff --git a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/detailed_server_configuration/template.md b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/detailed_server_configuration/template.md index 32d1a190..2ffcb471 100644 --- a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/detailed_server_configuration/template.md +++ b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/detailed_server_configuration/template.md @@ -4,12 +4,13 @@ The detailed server configuration leaked by this application shows which version **Business Impact** -This vulnerability can impact customers’ trust in the application which can result in reputational damage for the business and indirect financial losses. +This vulnerability could enable attacker exploitation that will disrupt product or service availability, +leading to financial loss and impact customers’ trust in the application. **Steps to Reproduce** 1. Use a browser to navigate to: {{URL}} -1. Observe detailed error message showing detailed server configuration +2. Observe detailed error message showing detailed server configuration **Proof of Concept (PoC)** diff --git a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/full_path_disclosure/template.md b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/full_path_disclosure/template.md index 97381cfb..be5a2f3a 100644 --- a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/full_path_disclosure/template.md +++ b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/full_path_disclosure/template.md @@ -4,12 +4,13 @@ The full path disclosure leaked by this application displays implementation info **Business Impact** -This vulnerability can impact customers’ trust in the application which can result in reputational damage for the business and indirect financial losses. +This vulnerability could enable attacker exploitation that will disrupt product or service availability, +leading to financial loss and impact customers’ trust in the application. **Steps to Reproduce** 1. Use a browser to navigate to: {{URL}} -1. Observe detailed error message showing the full path disclosure +2. Observe detailed error message showing the full path disclosure **Proof of Concept (PoC)** diff --git a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/template.md b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/template.md index 534d216e..f87de33a 100644 --- a/submissions/description/sensitive_data_exposure/visible_detailed_error_page/template.md +++ b/submissions/description/sensitive_data_exposure/visible_detailed_error_page/template.md @@ -2,12 +2,13 @@ Visible detailed error pages are a result of improper error handling which intro **Business Impact** -This vulnerability can impact customers’ trust in the application which can result in reputational damage for the business and indirect financial losses. +This vulnerability could enable attacker exploitation that will disrupt product or service availability, +leading to financial loss and impact customers’ trust in the application. **Steps to Reproduce** 1. Use a browser to navigate to: {{URL}} -1. Observe detailed error message +2. Observe detailed error message **Proof of Concept (PoC)**