Which of the following vulnerability can not be handled by Input Validation?
-
Cross site Scripting
-
Injection flaws
-
Privilege Escalation
-
None of the above
Privilege escalation cannot be handled by input validation alone. It's a logic flaw where users can access functions or data beyond their intended permissions. It requires proper authorization checks, access controls, and session management, not just input validation.
Input validation checks and constrains the data a user submits, which directly mitigates injection flaws (SQL injection, command injection) and Cross-Site Scripting (by rejecting/escaping malicious payloads in input). Privilege Escalation, however, is fundamentally an authorization/access-control failure — a user gaining rights beyond what they're permitted — which stems from broken access control logic, not from the shape or content of submitted input, so input validation alone can't prevent it.