Détail du CWE-792

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

Incomplete filtering of this nature involves either:

• only filtering a single instance of a special element when more exist, or
• not filtering all instances or all elements where multiple special elements exist.

Modes d'introduction

Implementation : REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Conséquences courantes

Notes de cartographie des vulnérabilités

Justification : This CWE entry is at the Variant level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.
Commentaire : Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

Soumission

Modifications