CWE-796: Only Filtering Special Elements Relative to a Marker
ID
CWE-796
Abstraction
Variant
Structure
Simple
Status
Incomplete
The product receives data from an upstream component, but only accounts for special elements positioned relative to a marker (e.g. "at the beginning/end of a string; the second argument"), thereby missing remaining special elements that may exist before sending it to a downstream component.
Modes of Introduction
| Phase | Note |
|---|---|
| Implementation | REALIZATION: This weakness is caused during implementation of an architectural security tactic. |
Loading...