1524
Example 1:
These two Struts validation forms have the same name.
Example Language: XML (Bad)
<form-validation>
<formset>
<form name="ProjectForm"> ... </form>
<form name="ProjectForm"> ... </form>
</formset>
</form-validation>
It is not certain which form will be used by Struts. It is critically important that validation logic be
maintained and kept in sync with the rest of the product.
Observed Examples
Reference Description
CVE-2013-4787 chain: mobile OS verifies cryptographic signature of file in an archive, but then
installs a different file with the same name that is also listed in the archive.
https://www.cve.org/CVERecord?id=CVE-2013-4787
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 984 SFP Secondary Cluster: Life Cycle 888 2411
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Notes
Relationship
This weakness is probably closely associated with other issues related to doubling, such as
CWE-675 (Duplicate Operations on Resource). It's often a case of an API contract violation
(CWE-227).
CWE-695: Use of Low-Level Functionality
Weakness ID : 695
Structure : Simple
Abstraction : Base
Description
The product uses low-level functionality that is explicitly prohibited by the framework or
specification under which the product is supposed to operate.
Extended Description
The use of low-level functionality can violate the specification in unexpected ways that effectively
disable built-in protection mechanisms, introduce exploitable inconsistencies, or otherwise expose
the functionality to attack.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
CWE Version 4.14
CWE-695: Use of Low-Level Functionality
CWE-695: Use of Low-Level Functionality