Incorrect Behavior Order: Validate Before Filter

The product validates data before it has been filtered, which prevents the product from detecting data that becomes invalid after the filtering step.

Soyutlama

Variant

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product validates data before it has been filtered, which prevents the product from detecting data that becomes invalid after the filtering step.

Genişletilmiş açıklama

This can be used by an attacker to bypass the validation and launch attacks that expose weaknesses that would otherwise be prevented, such as injection.

Terminoloji

Alternatif adlar ve kullanım biçimleri

Validate-before-cleanse

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

Bypass Protection Mechanism

Etkilenen güvenlik alanları: Access Control

Savunma

Nasıl önlenir ve çözülür?

Implementation · Architecture and Design

Birden fazla yaşam döngüsü evresinde uygulanacak savunma

Detay

Inputs should be decoded and canonicalized to the application's current internal representation before being filtered.