Matching DSsXSS

URI: MP-DSsXSS

Description: Finds a human using a web browser that accesses a service running on a host and using stored input data, along with optional host and service managers.

Root Pattern: R-DSsXSS

R-DSsXSS

Finds a human using a web browser that accesses a service running on a host and using stored input data.

(empty)

CC.AuC.DSsXSS.3

Stored XSS exploit from Service against Client: an attacker who can inject malicious content into service input Data stored on SHost can exploit a bug in Service, and send a harmful script to a trusting client browser Client. We assume this will make the browser leak authentication credentials, such as a password or session key.

Matching DSsXSS

R-DSsXSS

Construction Patterns (0)

Threat Patterns (1)

CC.AuC.DSsXSS.3