Umbra Wiki weakness weakness/CWE-797
Back to wiki

CWE-797 — Only Filtering Special Elements at an Absolute Position

provenance: imported · CWE: CWE-797

CWE-797: Only Filtering Special Elements at an Absolute Position

MITRE CWE weakness

Kind Weakness
Abstraction Variant
Status Incomplete
Likelihood of exploit

Description

The product receives data from an upstream component, but only accounts for special elements at an absolute position (e.g. "byte number 10"), thereby missing remaining special elements that may exist before sending it to a downstream component.

Common consequences

  • Integrity: Unexpected State

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/797.html
  • CWE list: https://cwe.mitre.org/data/index.html