I have Salesforce application which is using my web application hosted in one of our customer's server (IIS 8.0).
BURP Scan has identified one issue in my web application. Issue is something like this.
It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response.
The payload xxxxxxxx.burpcollaborator.net was submitted in the SSL SNI value and the HTTP Host header.
The application performed an HTTPS request to the specified domain. The response from that request was then included in the application's own response.
•CWE-610: Externally Controlled Reference to a Resource in Another Sphere
•CWE-918: Server-Side Request Forgery (SSRF)
My web application is hosted in iis 8.0. So, is there any way to prevent "host" header to be different than the originial server. I am not expert in IIS configuration. So, not sure if there is any configuration for that in IIS.
Any input to fix this issue?