CWE-794: Incomplete Filtering of Multiple Instances of Special Elements
Description
The product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstream component.
Incomplete filtering of this nature may be applied to: sequential elements (special elements that appear next to each other) or non-sequential elements (special elements that appear multiple times in different locations).
- Abstraction
- VariantA weakness tied to a specific language, technology or resource.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Integrity
Unexpected State
Related weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.