CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ31

VerifiedCloud Application Security

Which threat type can arise when an application fails to properly validate input and can be exploited to direct users to malicious sites that seem legitimate?

Explanation

Unvalidated redirects and forwards occur when an application uses untrusted input as a redirect target without validating it. Attackers can craft trusted-looking links that redirect users to malicious sites, commonly enabling phishing. OWASP Unvalidated Redirects and Forwards Cheat Sheet

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!