CWE-991 · Kategoria
SFP Secondary Cluster: Tainted Input to Environment
- Status
- Niekompletny
- Dodano
- 29 lipca 2014
- Ostatnia zmiana
- 29 czerwca 2023
Opis
This category identifies Software Fault Patterns (SFPs) within the Tainted Input to Environment cluster (SFP27).
Wpisy w tej grupie
- CWE-114 Process Control
- CWE-427 Uncontrolled Search Path Element
- CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
- CWE-471 Modification of Assumed-Immutable Data (MAID)
- CWE-472 External Control of Assumed-Immutable Web Parameter
- CWE-473 PHP External Variable Modification
- CWE-494 Download of Code Without Integrity Check
- CWE-622 Improper Validation of Function Hook Arguments
- CWE-673 External Influence of Sphere Definition
- CWE-94 Improper Control of Generation of Code ('Code Injection')
Wpis z katalogu CWE 4.20.