Vulnerability Fixation
Insecure Transition From HTTPS To HTTP

Insecure Transition from HTTPS to HTTP in Form Submission

This vulnerability occurs when a website uses HTTPS only on login or limited pages, but later switches back to HTTP for important actions. While HTTPS encrypts communication to protect data from attackers, HTTP does not provide encryption — allowing sensitive details to be intercepted.

Why HTTPS Matters

• HTTPS uses SSL/TLS encryption to protect data during transfer.
• It prevents attackers from reading or modifying sensitive information.
• Credentials or personal data sent over HTTP can be stolen using Man-in-the-Middle attacks.

How to Identify the Issue

• Open the website and check if the login or transaction pages show https:// in the URL bar.
• After logging in, inspect other pages — if any URLs switch to http://, data is at risk.
• Especially check pages that involve financial actions or personal information.