开通支付宝时一个问题，支付宝说ASP.NET Padding Oracle" vulnerab...

kisnly

开通支付宝功能时，支付宝审核时，说网站有一个如下的安全隐患，请问处理处理？

show "ASP.NET Padding Oracle" vulnerability

Detail:https://www.bundeio.com/WebResource.axd?d=1519024651
response:{"header":"HTTP/1.0 500 Internal Server Error
Date: Mon, 19 Feb 2018 07:17:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Set-Cookie: OCSESSID=0524485a75240bd2acb2d1fa1a; path=/, OCSESSID=0524485a75240bd2acb2d1fa1a; path=/
Content-Length: 153
Connection: close
Content-Type: text/html; charset=UTF-8
"}
request:{"body":"","header":"GET /WebResource.axd?d=1519024651 HTTP/1.1
Cookie: OCSESSID=0524485a75240bd2acb2d1fa1a; currency=USD; language=en-gb
Host: www.bundeio.com
Connection: Keep-Alive
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36
"}
target:"https://www.bundeio.com/WebResource.axd"
url:https://www.bundeio.com/WebResource.axd?d=1519024651

sunboy

怎么ASP.NET 也来咨询问题了，没懂

kisnly

是啊，明明是php+mysql 的opencart,为什么支付宝公司会扫描出这样一个安全漏洞，但是不调整，就不能和支付宝签约