10026—HTTP Parameter Override

PUBLISHEDsecurity alertMedium

Passive

Metadata

Alert ID:: 10026
Risk:: Medium
Type:: Passive
CWE:: CWE-20Improper Input Validation

摘要

Unspecified form action: HTTP parameter override attack potentially possible. This is a known problem with Java Servlets but other platforms may also be vulnerable.

解决方案

All forms must specify the action URL.

参考

browse all alerts