Please someone help me. Where does this warning come from?What can I do to stop this warning?
Logger: homeassistant.components.http.security_filter
Source: components/http/security_filter.py:54
Integration: HTTP (documentation, issues)
First occurred: 27 септември 2021 г., 3:39:00 ч. (6 occurrences)
Last logged: 27 септември 2021 г., 21:37:06 ч.
Filtered a request with a potential harmful query string: /wp-json/wc/store/products/collection-data?calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500
Filtered a request with a potential harmful query string: /?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500
Filtered a request with a potential harmful query string: /manager/radius/server_ping.php?ip=127.0.0.1|cat%20/etc/passwd>…/…/poc.txt&id=1
Filtered a request with a potential harmful query string: /lucee/admin/imgProcess.cfm?file=/…/…/…/context/1yh9eqZmxDgvUZcClbmULOpAUSw.cfm
Filtered a request with a potential harmful query string: /remote/fgt_lang?lang=/…/…/…/…//////////dev/cmdb/sslvpn_websession
System Health
version: core-2021.9.7
installation_type: Home Assistant OS
dev: false
hassio: true
docker: true
user: root
virtualenv: false
python_version: 3.9.7
os_name: Linux
os_version: 5.10.62
arch: x86_64
timezone: Europe/Sofia
GitHub API: ok
Github API Calls Remaining: 5000
Installed Version: 1.15.2
Stage: running
Available Repositories: 882
Installed Repositories: 7
logged_in: false
can_reach_cert_server: ok
can_reach_cloud_auth: ok
can_reach_cloud: ok
host_os: Home Assistant OS 6.4
update_channel: stable
supervisor_version: supervisor-2021.09.4
docker_version: 20.10.7
disk_total: 30.8 GB
disk_used: 2.9 GB
healthy: true
supported: true
board: ova
supervisor_api: ok
version_api: ok
installed_addons: File editor (5.3.3), Duck DNS (1.13.0), Terminal & SSH (9.1.3), Samba share (9.5.1), NGINX Home Assistant SSL proxy (3.0.2), Dnsmasq (1.4.4)
Thanks for the reply:slightly_smiling_face:. I need an alternative method to Nabu Casa. Can you tell me which add-on I need to use to set up HA, (tell me only the names) not to use port forwarding and to have external and internal access to the system. I don’t understand much about server systems. I use forums and video tutorials on how to set up HA. Thank you in advance for the information
Definitely do not have any port forwarding set up sir.
And when I did, they were never pointed to my HA…always had Nabu Casa.
I recently setup Tailscale to remove the only port forwarding I had (for Wireguard…port fwded to another server,not HA).
There is. When I had this issue shortly after migrating from DuckDNS to Nabu Casa I mirrored the switch port connect to Home Assistant to another free port on my network switch. I then connected a laptop to this port and ran Wireshark to capture all the packets sent to and from Home Assistant.
What I discovered was that while I had removed the port forward rules in my router I had forgotten to save the configuration. So the ports were still open. This is why I asked you to check again.
I was hoping there was a way to see the IP that created the initial security alert in the logs. Guess that may not be possible so I’m not sure how to proceed.
to remove the only port forwarding I had (for Wireguard…port fwded to another server,not HA).