diff --git a/dns/dns-rebinding.yaml b/dns/dns-rebinding.yaml index 0be6db5a62..6d5439be32 100644 --- a/dns/dns-rebinding.yaml +++ b/dns/dns-rebinding.yaml @@ -3,20 +3,13 @@ id: dns-rebinding info: name: DNS Rebinding Attack author: ricardomaia - severity: high + severity: unknown description: | Detects DNS Rebinding attacks by checking if the DNS response contains a private IPv4 or IPv6 address. reference: - https://capec.mitre.org/data/definitions/275.html - https://payatu.com/blog/dns-rebinding/ - https://heimdalsecurity.com/blog/dns-rebinding/ - classification: - cvss-metrics: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - cvss-score: 8.6 - cwe-id: CWE-350 - metadata: - verified: true - max-request: 2 tags: redirect,dns,network dns: