Threat intelligence / Technique
Flash Parameter Injection
An adversary takes advantage of improper data validation to inject malicious global parameters into a Flash file embedded within an HTML document. Flash files can leverage user-submitted data to configure the Flash document and access the embedding HTML document.
Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17
Confidence
—
An adversary takes advantage of improper data validation to inject malicious global parameters into a Flash file embedded within an HTML document. Flash files can leverage user-submitted data to configure the Flash document and access the embedding HTML document.
Labels
5 recorded
Relationships
1 external