Skip to content
Lame bugs for a rainy day
portswigger.net | blog | #web-security | #penetration-testing | #reporting | #portswigger | #session-management | #vulnerability-chaining | #pen-testing | #low-severity
Summary
Even tight apps yield 'lame' issues—informative errors, loose cookie scope, session fixation, directory listings. Stuttard says report them anyway: chained low-risk flaws can fully compromise an app.
- Published
- Collected