Password returned in later response
Summary: PortSwigger Research describes a vulnerability class in which applications return passwords submitted by users in clear form in later responses. The write-up notes that weaknesses in session handling, broken access controls, and cross-site scripting could let an attacker leverage this behavior to retrieve other users' passwords, and it rates the issue severity as Medium.
Key Takeaway: An application that echoes passwords back in its responses turns any separate flaw in session handling or access control into a path to other users' credentials, and the resulting compromises are extremely difficult to investigate because audit trails are obscured. Users who reused those passwords elsewhere are exposed even when the application itself handles only non-sensitive information.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026