Threat P.A.HuDFsXSS.6

URI: P.A.HuDFsXSS.6

Package: VulnerabilityCVSS

< prev | next >

Description: Service Service disabled to prevent XSS attack on Client injected via input Data from FlowsFrom: if service Service is disabled to prevent XSS attacks on Client injected via input Data from FlowsFrom, then Service will be unavailable.

Threat Type: Primary Threat

Matching Pattern:

MP-HuDFsXSS

Finds a human using a web browser that accesses a service which is using inflowing data and whose host has a manager, plus optionally the service manager.

Triggers Secondary Threats (1)

SC.A.CCCmSCS.0

Client Client cannot access unavailable service Service: loss of availability in the service Service makes the connection from Client unavailable on all channels.