Poisoned Pipeline / Mitigations / M1790

M1790

Limit access to webhooks

Limit access to WebHooks to trusted sources or IP addresses and avoid exposing them to the internet or making them publicly accessible.
Avoid making WebHook endpoints publicly accessible unless absolutely necessary.
Use firewalls or access controls to limit access to WebHook endpoints and ensure that only authorized systems and users can access them.

Applies to

• T0179 Exposed webHook

References

• https://hookdeck.com/webhooks/guides/webhooks-security-checklist#security-threats-and-solution-recap