CAPEC-271 Schema Poisoning

abstraction: standardstatus: active

An adversary corrupts or modifies the content of a schema for the purpose of undermining the security of the target. Schemas provide the structure and content definitions for resources used by an application. By replacing or modifying a schema, the adversary can affect how the application handles or interprets a resource, often leading to possible denial of service, entering into an unexpected state, or recording incomplete data.

likelihood: Lowseverity: High
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (2)

Related entries.

03

source

Where this definition is published.