CWE-554 — ASP.NET Misconfiguration: Not Using Input Validation Framework
CWE-554: ASP.NET Misconfiguration: Not Using Input Validation Framework
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Draft |
| Likelihood of exploit | — |
Description
The ASP.NET application does not use an input validation framework.
Common consequences
- Integrity: Unexpected State
Mitigations
Architecture and Design — Use the ASP.NET validation framework to check all program input before it is processed by the application. Example uses of the validation framework include checking to ensure that: Phone number fields contain only valid characters in phone numbers Boolean values are only "T" or "F" Free-form strings are of a reasonable length and composition
References
- CWE page: https://cwe.mitre.org/data/definitions/554.html
- CWE list: https://cwe.mitre.org/data/index.html