Multiple choice general knowledge science & technology

Attacker, who is an authorized system user, simply changes the URL to a privileged unprotected page and gets the access of it. This happened due to :

  1. Failure to Restrict URL Access

  2. Cross Site Scripting

  3. Broken Authentication and Session Management

  4. Insufficient Transport Layer Protection
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Failure to Restrict URL Access happens when applications don't verify authorization for every page request. Attackers can simply guess or manipulate URLs (like /admin, /user/profile/123) to access privileged functionality. The scenario describes this exactly - an authorized user changes URL to access unprotected privileged pages.

Keep practicing — related questions