Only Filtering Special Elements at a Specified Location

Opis

The product receives data from an upstream component, but only accounts for special elements at a specified location, thereby missing remaining special elements that may exist before sending it to a downstream component.

A filter might only account for instances of special elements when they occur:

- relative to a marker (e.g. "at the beginning/end of string; the second argument"), or

- at an absolute position (e.g. "byte number 10").

This may leave special elements in the data that did not match the filter position, but still may be dangerous.

Skutki

• Integrity

  Unexpected State

Słabość nadrzędna

• CWE-791 Incomplete Filtering of Special Elements

Słabości podrzędne

• CWE-796 Only Filtering Special Elements Relative to a Marker
• CWE-797 Only Filtering Special Elements at an Absolute Position

Kiedy powstaje

• Implementation — REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Dotyczy

Not Language-Specific