Excessive data exposure
An API returning more fields than the client actually needs, relying on the client to filter.
Learn it through a story
- Every API Is a Promise Someone Will Break (Cybersecurity for Juniors 3, Ch 5)
Related terms
- Evil twin A fake wifi access point set up with a name close enough to a real one to trick people into connecting.
- Evil twin network A fake wifi hotspot built to look like a trusted one.
- Excessive agency An AI agent having more permission or capability than its task actually requires.
- Expiry (exp) The field declaring when a token should stop being valid.
- False positive An alert that looks suspicious automatically but turns out to be harmless.
- Finding chain Combining several smaller weaknesses into one larger, more serious exploit path.