#rest

0 stories this week · 0 this month · 4 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

Apache discloses four Struts flaws, including OGNL injection that can enable remote code execution.

Apache Struts REST plugin reads request bodies without a size limit, enabling memory-exhaustion denial of service.

Siemba released automated IDOR/BOLA testing for REST, GraphQL and SOAP APIs, checking a 200-endpoint collection in under an hour.

Stories tagged #rest