Home / Vulnerability Database / Kotlin : Hidden HTML field
Kotlin
Kotlin : Hidden HTML field
Classification
HIPAA
CWE
Overview
The application uses a hidden field.
The developer could assume that users would not see the hidden field and would not be able to manipulate the data transferred through it. It is not so: attackers can transfer data, including malicious data, to hidden fields.
A hidden field must not be used to transfer valuable information. Its contents are cached by the browser, which can lead to data confidentiality loss.
LOW
DerScanner Severity Score
Do you want to fix Kotlin : Hidden HTML field in your application?
See also
Kotlin
Kotlin : Missing required cryptographic step
Kotlin
Kotlin : Logging into system output
Kotlin