CVA Web Application & API Security Flashcards

Which vulnerability allows attackers to send unauthorized commands from a trusted user's browser to a web application?

Answer: CSRF

Cross-Site Request Forgery (CSRF) tricks authenticated users into unknowingly submitting malicious requests by exploiting their active session.

What does path traversal (directory traversal) allow an attacker to do on a vulnerable web server?

Answer: Access files outside the web root by manipulating file path references

Path traversal uses sequences like '../' in file path inputs to break out of the web root and access arbitrary files on the server's filesystem.

When testing API authentication, which attack involves obtaining a new access token using a stolen refresh token?

Answer: Refresh token abuse

Refresh token abuse occurs when a stolen refresh token is used to silently obtain new access tokens, maintaining persistent unauthorized access.

Which OWASP vulnerability involves an application loading code, plugins, or data from untrusted sources without sufficient verification?

Answer: Software and Data Integrity Failures

Software and Data Integrity Failures occur when applications rely on untrusted plugins, libraries, or data without integrity verification, enabling supply chain attacks.

What is 'business logic vulnerability' in the context of web application security testing?

Answer: A weakness in how the application enforces its intended business rules, allowing unintended actions

Business logic vulnerabilities are flaws in the design of an application's workflow that allow attackers to abuse legitimate functionality in unintended ways.

Which burp suite feature is most useful for identifying hidden parameters and endpoints during a web application assessment?

Answer: Burp Crawl and Audit (Scanner)

Burp Suite's Crawl and Audit (Scanner) automatically discovers hidden endpoints, parameters, and vulnerabilities by crawling the application and issuing targeted probes.