Detectify security updates for 7 March
Blog post from Detectify
Detectify regularly updates its security tool every two weeks with new findings and improvements sourced from its security researchers and the Crowdsource ethical hacker community, ensuring that users have access to the latest security measures. While specific details of all updates cannot be disclosed due to confidentiality agreements, notable vulnerabilities addressed include Jenkins RCE, Nexus Repository Manager RCE, Next.js Path Traversal, Apache Airflow exposure, Craft CMS full path and log disclosures, and FastCGI test page exposure. These vulnerabilities highlight risks such as remote code execution and unauthorized data access, emphasizing the importance of maintaining robust security practices and configurations in web applications and related technologies.