Lack of data validation - Reflected Parameters
Description
Included in the server error responses is unvalidated user input containing special characters, which can lead to vulnerabilities such as XSS.
Impact
Inject special characters in server responses.
Recommendation
Validate on the server side the types of data that are entered into different kind of fields in the application.
Threat
Authenticated attacker from the Internet.
Expected Remediation Time
⏱️ 60 minutes.