Skip to content
OpenAdvisories

Weakness (CWE)

CWE-598: Use of HTTP Request With Sensitive Query String

Variant Draft

The web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.

How to prevent it (1 mitigation)

  1. Implementation

    When sending sensitive information, only
    include it in the request body or request headers
    instead of the query string. This may require avoiding
    use of GET requests.

Source: MITRE CWE-598

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.