CAPEC 240 Resource Injection

Description

🇬🇧 English Original 🇮🇹 Italiano AI Translated

An adversary exploits weaknesses in input validation by manipulating resource identifiers enabling the unintended modification or specification of a resource.

AI Generated Translation

Un adversario sfrutta vulnerabilità nella convalida degli input manipolando gli identificativi delle risorse, consentendo la modifica o la specifica non intenzionale di una risorsa.

Mitigations

3

Enforce Regular Patching Of Software.

Ensure All Input Content That Is Delivered To Client Is Sanitized Against An Acceptable Content Specification.

Perform Input Validation For All Content.

Consequences

Security Scopes Affected

Confidentiality Integrity

Potential Impacts

Modify Data Read Data

Relationships

Child CAPECs

CAPEC-610 Cellular Data Injection