Project

General

Profile

Actions
Copy link

SecOps #1377

open
CD

[Sécurité] Vulnérabilité de code : script/maintenance/nginx.conf:40 (generic.nginx.security.header-redefinition.header-redefinition)

SecOps #1377: [Sécurité] Vulnérabilité de code : script/maintenance/nginx.conf:40 (generic.nginx.security.header-redefinition.header-redefinition)

Added by Client Dashboard 27 days ago. Updated 11 days ago.

Status:
Submitted
Priority:
Normal
Assignee:
-
Start date:
07/08/2026
Due date:
% Done:

0%

Estimated time:
spec_ref:
build_status:
build_number:
ci_run_url:
scan_status:
scan_report_url:
deploy_status:
preprod_url:
deployed_at:
branch:
pr_url:
security_key:
script/maintenance/nginx.conf:40_generic.nginx.security.header-redefinition.header-redefinition
severity:
medium
paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : script/maintenance/nginx.conf:40
**Règle** : generic.nginx.security.header-redefinition.header-redefinition

The 'add_header' directive is called in a 'location' block after headers have been set at the server block. Calling 'add_header' in the location block will actually overwrite the headers defined in the server block, no matter which headers are set. To fix this, explicitly set all headers or set all headers in the server block.

### Extrait de code
```
requires login
```

### Lien CVE
https://github.com/yandex/gixy/blob/master/docs/en/plugins/addheaderredefinition.md

Actions
Copy link

Also available in: PDF Atom