Incomplete Filtering of Multiple Instances of Special Elements

Opis

The product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstream component.

Incomplete filtering of this nature may be applied to:

- sequential elements (special elements that appear next to each other) or

- non-sequential elements (special elements that appear multiple times in different locations).

Skutki

• Integrity

  Unexpected State

Słabość nadrzędna

• CWE-792 Incomplete Filtering of One or More Instances of Special Elements

Kiedy powstaje

• Implementation — REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Dotyczy

Not Language-Specific