448
• File Processing
Affected Resources
• File or Directory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 992 SFP Secondary Cluster: Faulty Input Transformation 888 2416
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Research Gap
These are probably under-studied in Windows and Mac environments, where file names are
case-insensitive and thus are subject to equivalence manipulations involving case.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Case Sensitivity (lowercase,
uppercase, mixed case)
CWE-179: Incorrect Behavior Order: Early Validation
Weakness ID : 179
Structure : Simple
Abstraction : Base
Description
The product validates input before applying protection mechanisms that modify the input, which
could allow an attacker to bypass the validation via dangerous inputs that only arise after the
modification.
Extended Description
Product needs to validate data at the proper time, after data has been canonicalized and cleansed.
Early validation is susceptible to various manipulations that result in dangerous inputs that are
produced by canonicalization and cleansing.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 20 Improper Input Validation 20
ChildOf 696 Incorrect Behavior Order 1527
ParentOf 180 Incorrect Behavior Order: Validate Before Canonicalize 451
ParentOf 181 Incorrect Behavior Order: Validate Before Filter 453
Relevant to the view "Software Development" (CWE-699)
CWE Version 4.14
CWE-179: Incorrect Behavior Order: Early Validation
CWE-179: Incorrect Behavior Order: Early Validation