Threat P.A.HuDSsXSS.6

URI: P.A.HuDSsXSS.6

Package: VulnerabilityCVSS

< prev | next >

Description: Service Service disabled to prevent XSS attack on Client injected via local input Data: if service Service is disabled to prevent XSS attacks on Client injected via input Data, then Service will be unavailable.

Threat Type: Primary Threat

Matching Pattern:

MP-HuDSsXSS

Finds a web browser accessing a service which is using stored input, plus the service host and manager.

Triggers Secondary Threats (1)

SC.A.CCCmSCS.0

Client Client cannot access unavailable service Service: loss of availability in the service Service makes the connection from Client unavailable on all channels.