COMMON WEAKNESS ENUMERATIONDraft

CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

The product does not adequately filter user-controlled input for special elements with control implications.

Soyutlama

Class

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product does not adequately filter user-controlled input for special elements with control implications.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Risk

Başarılı sömürü neye yol açar?

Modify Application DataExecute Unauthorized Code or Commands

Etkilenen güvenlik alanları: Integrity, Confidentiality, Availability

Savunma

Nasıl önlenir ve çözülür?

Requirements

Güvenlik gereksinimi

Detay
Programming languages and supporting technologies might be chosen which are not subject to these issues.

Implementation

Uygulama aşaması savunması

Detay
Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.