1681
ParentOf 795 Only Filtering Special Elements at a Specified Location 1685
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1019 Validate Inputs 2433
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 137 Data Neutralization Issues 2311
Common Consequences
Scope Impact Likelihood
Integrity Unexpected State
Demonstrative Examples
Example 1:
The following code takes untrusted input and uses a regular expression to filter "../" from the input.
It then appends this result to the /home/user/ directory and attempts to read the file in the final
resulting path.
CWE Version 4.14
CWE-792: Incomplete Filtering of One or More Instances of Special Elements
CWE-792: Incomplete Filtering of One or More Instances of Special Elements