Home / Vulnerability Database / Java : Hidden HTML field
Java
Java : Hidden HTML field
Classification
HIPAA
CWE
Overview
The application uses a hidden field.
The developer could assume that users would not see the hidden field and would not be able to manipulate the data transferred through it. It is not so: attackers can transfer data, including malicious data, to hidden fields.
A hidden field must not be used to transfer valuable information. Its contents are cached by the browser, which can lead to data confidentiality loss.
LOW
DerScanner Severity Score
Do you want to fix Java : Hidden HTML field in your application?
See also
Java
Java : Race condition
Java
Java : Text4Shell Vulnerability
Java