190
Mapped Taxonomy Name Node ID Fit Mapped Node Name
Software Fault Patterns SFP24 Tainted input to command
Related Attack Patterns
CAPEC-ID Attack Pattern Name
245 XSS Using Doubled Characters
CWE-86: Improper Neutralization of Invalid Characters in Identifiers in Web
Pages
Weakness ID : 86
Structure : Simple
Abstraction : Variant
Description
The product does not neutralize or incorrectly neutralizes invalid characters or byte sequences in
the middle of tag names, URI schemes, and other identifiers.
Extended Description
Some web browsers may remove these sequences, resulting in output that may have unintended
control implications. For example, the product may attempt to remove a "javascript:" URI scheme,
but a "java%00script:" URI may bypass this check and still be rendered as active javascript by
some browsers, allowing XSS or other attacks.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 436 Interpretation Conflict 1057
ChildOf 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')