CWE-722 · Kategoria
OWASP Top Ten 2004 Category A1 - Unvalidated Input
- Status
- Przestarzały
- Dodano
- 15 sierpnia 2008
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2004.
Wpisy w tej grupie
- CWE-102 Struts: Duplicate Validation Forms
- CWE-103 Struts: Incomplete validate() Method Definition
- CWE-104 Struts: Form Bean Does Not Extend Validation Class
- CWE-106 Struts: Plug-in Framework not in Use
- CWE-109 Struts: Validator Turned Off
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- CWE-166 Improper Handling of Missing Special Element
- CWE-167 Improper Handling of Additional Special Element
- CWE-179 Incorrect Behavior Order: Early Validation
- CWE-180 Incorrect Behavior Order: Validate Before Canonicalize
- CWE-181 Incorrect Behavior Order: Validate Before Filter
- CWE-182 Collapse of Data into Unsafe Value
- CWE-183 Permissive List of Allowed Inputs
- CWE-20 Improper Input Validation
- CWE-425 Direct Request ('Forced Browsing')
- CWE-472 External Control of Assumed-Immutable Web Parameter
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
- CWE-602 Client-Side Enforcement of Server-Side Security
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Źródła
Wpis z katalogu CWE 4.20.