HPP involves supplying multiple HTTP parameters with the same name. Different backend components might parse them differently, allowing attackers to bypass validation rules.
To resolve this vulnerability, follow these config changes or developer practices:
After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.
Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.