CWE-792 — Incomplete Filtering of One or More Instances of Special Elements
CWE-792: Incomplete Filtering of One or More Instances of Special Elements
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.
Incomplete filtering of this nature involves either: only filtering a single instance of a special element when more exist, or not filtering all instances or all elements where multiple special elements exist.
Common consequences
- Integrity: Unexpected State
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/792.html
- CWE list: https://cwe.mitre.org/data/index.html