Email Address Disclosure

Description

The disclosure of email addresses on webpages can make them vulnerable to harvesting by spambots, leading to an influx of unsolicited spam emails.

Recommendation

To prevent email address disclosure and spam, refrain from displaying personal email addresses directly on webpages. Instead, utilize submission forms with CAPTCHA challenges to receive messages securely.

References

• Wikipedia: Spambot
• CWE-200
• CAPEC-118
• OWASP 2021-A5

Related Issues

• Private IPv4 Address Disclosure - Vulnerability
• Private IPv6 Address Disclosure - Vulnerability
• Apache Version Disclosure - Vulnerability
• Arbitrary Source Code Disclosure - Vulnerability

Tags:

Information Disclosure

Spam Prevention