Home / Vulnerability Database / C-sharp : Hidden HTML field
C#
C-sharp : Hidden HTML field
Classification
HIPAA
CWE
Overview
The application uses a hidden field.
The developer could assume that users would not see the hidden field and would not be able to manipulate the data transferred through it. It is not so: attackers can transfer data, including malicious data, to hidden fields.
A hidden field must not be used to transfer valuable information. Its contents are cached by the browser, which can lead to data confidentiality loss.
LOW
DerScanner Severity Score
Do you want to fix C-sharp : Hidden HTML field in your application?
See also
C#
C-sharp : JWT: None Algorithm
C#
C-sharp : Insecure data transmission: Database
C#