topic How to request a URL filtering change to High-Risk? in General Topics

How to request a URL filtering change to High-Risk?

Adrian_Jensen — Wed, 11 Dec 2024 18:40:09 GMT

How does one submit a request to PA to recategorize a URL to the High-Risk category?

The root domain associated with CVE-2023-6961 (WordPress XSS vulnerability) is categorized as High-Risk, but the subdomain actually serving the exploit is categorized as Insufficient-Content, Low-Risk. The Request Change function in the URL Filtering test does not allow you to choose High-Risk as the requested change.

Re: How to request a URL filtering change to High-Risk?

Remo — Wed, 11 Dec 2024 19:55:19 GMT

Hi @Adrian_Jensen

It is not possible to request a change to high-risk. In your case you should request a change to malware and add ad much information about the exploit or how to get there to the description. When the category is changed to malware, I assume the associated risk will automatically be set to high.

Re: How to request a URL filtering change to High-Risk?

Adrian_Jensen — Wed, 11 Dec 2024 20:13:07 GMT

Unfortunately. the description for the change request is limited to 500 characters, so hard to explain fully. Hopefully someone responds with questions if there is more info needed, instead of auto-rejecting.