Email Address Disclosure

Description

The disclosure of email addresses on webpages can make them vulnerable to harvesting by spambots, leading to an influx of unsolicited spam emails.

Recommendation

To prevent email address disclosure and spam, refrain from displaying personal email addresses directly on webpages. Instead, utilize submission forms with CAPTCHA challenges to receive messages securely.

References

• Wikipedia: Spambot
• CWE-200
• CAPEC-118
• OWASP 2021-A1
• OWASP 2021-A5

Related Issues

• Nginx Version Disclosure - Vulnerability
• Apache server-status enabled - Vulnerability
• Apache Version Disclosure - Vulnerability
• Application and Database Error - Vulnerability

Tags:

Information Disclosure

Spam Prevention