1. Home
2. All questions
3. Question 163

CompTIA Security+ study material · question 163 of 611

An application turns attacker-controlled data directly into live objects. Which flaw class is this, and what is the worst case?

• Vulnerabilities

1. Injection, leading to data disclosure
2. Insecure deserialisation, potentially leading to remote code execution
3. Cryptographic failure, leading to key disclosure
4. Broken access control, leading to privilege escalation

Challenge yourself on this topic → Study as cards