BSCP

Practice session

A web application's password reset flow generates a reset token stored in the URL. The browser's Referer header may leak this token when the user navigates to a third-party link on the page. Which vulnerability class does this represent?

Loading your practice session…