CAPEC-107 Cross Site Tracing
abstraction: detailedstatus: activeCross Site Tracing (XST) enables an adversary to steal the victim's session cookie and possibly other authentication credentials transmitted in the header of the HTTP request when the victim's browser communicates to a destination system's web server.
likelihood: Mediumseverity: Very High
01
weaknesses (2)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.