CWE-1174—ASP.NET Misconfiguration: Improper Model Validation

PUBLISHEDweakness record

released 2019-01-03 · last modified 2025-12-11

Metadata

CWE ID:: CWE-1174
Abstraction:: Variant
Structure:: Simple
Status:: Draft
Release Date:: 2019-01-03
Latest Modification Date:: 2025-12-11

Weakness Name

ASP.NET Misconfiguration: Improper Model Validation

Description

The ASP.NET application does not use, or incorrectly uses, the model validation framework.

Common Consequences

Scope:: Integrity
Impact:: Unexpected State
Notes:: Unchecked input leads to cross-site scripting, process control, and SQL injection vulnerabilities, among others.

Related Weaknesses

browse all CWEs