288
CAPEC-ID Attack Pattern Name
73 User-Controlled Filename
81 Web Server Logs Tampering
85 AJAX Footprinting
104 Cross Zone Scripting
References
[REF-45]OWASP. "OWASP Enterprise Security API (ESAPI) Project". < http://www.owasp.org/
index.php/ESAPI >.
[REF-46]Joshbw. "Output Sanitization". 2008 September 8. < https://web.archive.org/
web/20081208054333/http://analyticalengine.net/archives/58 >.2023-04-07.
[REF-47]Niyaz PK. "Sanitizing user data: How and where to do it". 2008 September 1. < https://
web.archive.org/web/20090105222005/http://www.diovo.com/2008/09/sanitizing-user-data-howand-
where-to-do-it/ >.2023-04-07.
[REF-48]Jeremiah Grossman. "Input validation or output filtering, which is better?". 2007 January 0.
< https://blog.jeremiahgrossman.com/2007/01/input-validation-or-output-filtering.html >.2023-04-07.
[REF-49]Jim Manico. "Input Validation - Not That Important". 2008 August 0. < https://
manicode.blogspot.com/2008/08/input-validation-not-that-important.html >.2023-04-07.
[REF-50]Michael Eddington. "Preventing XSS with Correct Output Encoding". < http://
phed.org/2008/05/19/preventing-xss-with-correct-output-encoding/ >.
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
CWE-117: Improper Output Neutralization for Logs
Weakness ID : 117
Structure : Simple
Abstraction : Base
Description
The product does not neutralize or incorrectly neutralizes output that is written to logs.
Extended Description
This can allow an attacker to forge log entries or inject malicious content into logs.
Log forging vulnerabilities occur when:
1. Data enters an application from an untrusted source.
2. The data is written to an application or system log file.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 116 Improper Encoding or Escaping of Output 281
CanFollow 93 Improper Neutralization of CRLF Sequences ('CRLF
Injection')