CWE-625—Permissive Regular Expression

名称

Permissive Regular Expression

描述

The product uses a regular expression that does not sufficiently restrict the set of allowed values.

This effectively causes the regexp to accept substrings that match the pattern, which produces a partial comparison to the target. In some cases, this can lead to other weaknesses. Common errors include:

常见后果

范围：

Access Control

影响：

Bypass Protection Mechanism

相关 CWE

• CWE-183Permissive List of Allowed Inputs
• CWE-184Incomplete List of Disallowed Inputs
• CWE-185Incorrect Regular Expression
• CWE-187Partial String Comparison