Missing protection · Scan · first seen 1 Oct
LowLikelyOpenPlatformfix by 29 Jan
Open · Platform's
It's Platform's, but no one has picked it up.
One problem in two places, found by scan.
1 source · 2 places
Scan
First found Thu 1 Oct, last seen Mon 12 Oct
What closes it
Nobody can mark it fixed by hand. A person submits the fix; a scan or a retest decides it.
39th of 39 in your queue
Proof first, then exploitation in the wild, a public exploit, EPSS and severity, adjusted for exposure and how much the asset matters
Priority
12 / 100
What each source saw
As each source gives it · secrets, keys and card numbers stay masked
The scan's case file · tessellatepay.com
See it in that scanWhat we saw, on 2 hosts
The response from https://tessellatepay.com has no Permissions-Policy header.
The fix
Add the header at your edge (Cloudflare can set it for every host at once) or in the app.
Where
What happened, and what was said
1 event · 0 comments · oldest first