CWE-794 - Incomplete Filtering of Multiple Instances of Special Elements
- Abstraction:Variant
- Structure:Simple
- Status:Incomplete
- Release Date:2009-12-28
- Latest Modification Date:2023-06-29
Weakness Name
Incomplete Filtering of Multiple Instances of Special Elements
Description
The product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstream component.
Incomplete filtering of this nature may be applied to:
Common Consequences
Scope: Integrity
Impact: Unexpected State