137
ParentOf 76 Improper Neutralization of Equivalent Special Elements 144
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1019 Validate Inputs 2433
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity
Confidentiality
Availability
Modify Application Data
Execute Unauthorized Code or Commands
Potential Mitigations
Phase: Requirements
Programming languages and supporting technologies might be chosen which are not subject to
these issues.
Phase: Implementation
Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all
input.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
MemberOf 1347 OWASP Top Ten 2021 Category A03:2021 - Injection 1344 2490
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Special Element Injection
CWE Version 4.14
CWE-76: Improper Neutralization of Equivalent Special Elements
CWE-76: Improper Neutralization of Equivalent Special Elements