9

Standard Web Application Vulnerabilities

Web application vulnerabilities are weaknesses or flaws in the security of web applications that attackers can exploit to compromise the confidentiality, integrity, or availability of data or the application itself. These vulnerabilities can have serious consequences, ranging from data breaches to unauthorized access and code execution.

In this chapter, we’re going to cover standard web application vulnerabilities by looking at the following main topics:

  • Injection attacks
  • Broken authentication and session management
  • Request forgery
  • Language-specific defenses
  • Example of enterprise web defenses

By the end of this chapter, you will have a good understanding of the typical attacks that are made on

Get Security-Driven Software Development now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.