CWE-845 · Kategoria
The CERT Oracle Secure Coding Standard for Java (2011) Chapter 2 - Input Validation and Data Sanitization (IDS)
- Status
- Przestarzały
- Dodano
- 24 maja 2011
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to rules in the Input Validation and Data Sanitization (IDS) chapter of The CERT Oracle Secure Coding Standard for Java (2011).
Wpisy w tej grupie
- CWE-116 Improper Encoding or Escaping of Output
- CWE-134 Use of Externally-Controlled Format String
- CWE-144 Improper Neutralization of Line Delimiters
- CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences
- CWE-180 Incorrect Behavior Order: Validate Before Canonicalize
- CWE-182 Collapse of Data into Unsafe Value
- CWE-289 Authentication Bypass by Alternate Name
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
- CWE-625 Permissive Regular Expression
- CWE-647 Use of Non-Canonical URL Paths for Authorization Decisions
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CWE-838 Inappropriate Encoding for Output Context
Źródła
Wpis z katalogu CWE 4.20.