Matching HuDFrXSS

URI: MP-HuDFrXSS

Package: ProcessComms

< prev | next >

Description: Finds human using a web browser that uses a service with a host and a host manager, where the browser receives from another process (not the service) data not created by either the browser or its user, plus the client channel between the browser and the service which must go via an IP subnet, and optionally the service manager.

Root Pattern: R-HuDFrXSS

R-HuDFrXSS

Finds human using a web browser that uses a service with a host and host manager, where the browser also uses inflowing data.

Threat Patterns (1)

P.A.HuDFrXSS.6

Service Service disabled to prevent XSS attack on Client via its input Data from FlowsFrom: if service Service is disabled by HostManager to prevent XSS attacks using malicious content injected via Data from FlowsFrom, this will make the service unavailable.