CAPEC-198 XSS Targeting Error Pages

abstraction: detailedstatus: active

An adversary distributes a link (or possibly some other query structure) with a request to a third party web server that is malformed and also contains a block of exploit code in order to have the exploit become live code in the resulting error page.

severity: Medium
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (3)

Related entries.

03

source

Where this definition is published.