When you say "header-based vulnerabilities," what exactly do you mean? Name three examples that spring to mind.

Solution

Header based vulnerabilities

           The header based vulnerabilities is nothing but a HTTP (Hyper Text Transfer Protocol) header injection vulnerabilities. HTTP is application layer protocol mainly used to access data on the World Wide Web (WWW). And the header is used to exchange additional information between client and server.

           The Header based vulnerabilities is a security term. In which the attacker try to attack a web application by inserting or injecting extra HTTP headers in to he original HTTP responses. It is a kind of technique which is used for malicious attacks. these kind of vulnerabilities may leads to information disclosure , phishing and so on

            If an attacker is succeed to insert an HTTP header to the original one then the attacker can change the header and the entire data of the response body. The main reason for these kind of vulnerabilities is the usage of external data directly in the HTTP responses most of the time leads to header based vulnerabilities.

            The Header based vulnerabilities can be detected by the help of vulnerability scanners. And another method is encoding the external data which is using in the header before adding it into the header.