Incomplete Filtering of One or More Instances of Special Elements

Opis

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

Incomplete filtering of this nature involves either:

- only filtering a single instance of a special element when more exist, or

- not filtering all instances or all elements where multiple special elements exist.

Skutki

• Integrity

  Unexpected State

Słabość nadrzędna

• CWE-791 Incomplete Filtering of Special Elements

Słabości podrzędne

• CWE-793 Only Filtering One Instance of a Special Element
• CWE-794 Incomplete Filtering of Multiple Instances of Special Elements

Kiedy powstaje

• Implementation — REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Dotyczy

Not Language-Specific