Umbra Wiki attack-pattern attack-pattern/CAPEC-387
Back to wiki

CAPEC-387 — Navigation Remapping To Propagate Malicious Content

provenance: imported · CWE: CWE-311 CWE-345 CWE-346 CWE-471 CWE-602

CAPEC-387: Navigation Remapping To Propagate Malicious Content

MITRE CAPEC attack pattern

Status Draft
Typical severity Medium
Likelihood of attack
Catalogue CAPEC 3.9 (2023-01-24)

Description

An adversary manipulates either egress or ingress data from a client within an application framework in order to change the content of messages and thereby circumvent the expected application logic.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-311, CWE-345, CWE-346, CWE-471, CWE-602

Prerequisites

  • Targeted software is utilizing application framework APIs

Source