CWE-796 — Only Filtering Special Elements Relative to a Marker
CWE-796: Only Filtering Special Elements Relative to a Marker
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product receives data from an upstream component, but only accounts for special elements positioned relative to a marker (e.g. "at the beginning/end of a string; the second argument"), thereby missing remaining special elements that may exist before sending it to a downstream component.
Common consequences
- Integrity: Unexpected State
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/796.html
- CWE list: https://cwe.mitre.org/data/index.html