Cleartext Transmission of Sensitive Information
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-319: Cleartext Transmission of Sensitive Information |
| OWASP | A03:2017 - Sensitive Data Exposure |
| Confidence Level | High |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The code includes links that use the unsecured HTTP protocol instead of HTTPS. This means any data sent or received through these links can be intercepted or tampered with by attackers.
Impact#
If users follow HTTP links, sensitive information like login credentials or personal details could be exposed to eavesdroppers on the network. Attackers might intercept or alter the content, leading to data theft, account compromise, or malicious redirection.