Jump to content

Recommended Posts

  • 3 weeks later...
  • 2 weeks later...

Password type input with autocomplete enabled

Vulnerability description

Password type input named pass from unnamed form with action index.php has autocomplete enabled. An attacker with local access could obtain the cleartext password from the browser cache.

This vulnerability affects /links.

The impact of this vulnerability

Possible sensitive information disclosure

Attack details

No details are available.

 

 

How to fix this vulnerability

The password autocomplete should be disabled in sensitive applications.

To disable autocomplete, you may use a code similar to:

<INPUT TYPE="password" AUTOCOMPLETE="off">

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.