CWE-182
Collapse of Data into Unsafe Value
Draft
2006-07-19 00:00 +00:00
2023-06-29 00:00 +00:00
Alerte pour un CWE
Stay informed of any changes for a specific CWE.
Collapse of Data into Unsafe Value
The product filters data in a way that causes it to be reduced or "collapsed" into an unsafe value that violates an expected security property.
Informations
Modes Of Introduction
ImplementationApplicable Platforms
Language
Class: Not Language-Specific (Undetermined)Common Consequences
| Scope | Impact | Likelihood |
|---|---|---|
| Access Control | Bypass Protection Mechanism |
Observed Examples
| Reference | Description |
|---|---|
| "/.////" in pathname collapses to absolute path. | |
| "/.//..//////././" is collapsed into "/.././" after ".." and "//" sequences are removed. | |
| ".../...//" collapsed to "..." due to removal of "./" in web server. | |
| chain: HTTP server protects against ".." but allows "." variants such as "////./../.../". If the server removes "/.." sequences, the result would collapse into an unsafe value "////../" (CWE-182). | |
| MFV. Regular expression intended to protect against directory traversal reduces ".../...//" to "../". | |
| XSS protection mechanism strips a |