Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and version) via an HTTP request that generates certain errors such as 400 "Bad Request," which leak the Server header in the response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft URLScan获取敏感信息（服务器名或者版本）且泄漏Server头漏洞
Vulnerability Description
具有RemoveServerHeader选项有效的Microsoft URLScan 2.5版本存在漏洞。远程攻击者借助产生特定错误如400 "Bad Request"的HTTP请求获取敏感信息（服务器名或者版本），该漏洞在响应中泄漏Server头。
CVSS Information
N/A
Vulnerability Type
N/A