Matching DSrXSS

URI: MP-DSrXSS

Description: Finds human using a web browser that uses a service with a host, where the browser also uses locally stored data not entered or updated by the user, along with optional host and service managers.

Root Pattern: R-DSrXSS

R-DSrXSS

Finds human using a web browser that uses a service with a host, where the browser also uses locally stored data.

(empty)

CC.AuC.DSrXSS.3

Reflected XSS exploit on Client from Service injected via locally stored client input Data: an attacker who can inject malicious content into locally stored input Data used by Client can exploit a bug in Service and send a harmful script to the client browser. We assume this will make the browser leak authentication credentials, such as a password or session key.

Matching DSrXSS

R-DSrXSS

Construction Patterns (0)

Threat Patterns (1)

CC.AuC.DSrXSS.3