Skip to main content

URL-Based Routing

CCC.LB.CP05

The service can direct incoming requests to different backend resources based on the content of the request URL.

Related Threats

IDTitleDescription
CCC.LB.TH11Routing Rules Direct Requests to Unintended DestinationsPath, host or header routing rules, redirects, rewrites and fixed responses may be misordered, overly broad, or modified without authorization. Requests are then forwarded to the wrong backend, redirected to an external destination, or answered with attacker-controlled content. This exposes internal services and compromises the confidentiality and integrity of user sessions and data.