CWE-795Only Filtering Special Elements at a Specified Location

PUBLISHEDweakness record
released 2009-12-28 · last modified 2025-12-11

Metadata

CWE ID:
CWE-795
Abstraction:
Base
Structure:
Simple
Status:
Incomplete
Release Date:
2009-12-28
Latest Modification Date:
2025-12-11

Weakness Name

Only Filtering Special Elements at a Specified Location

Description

The product receives data from an upstream component, but only accounts for special elements at a specified location, thereby missing remaining special elements that may exist before sending it to a downstream component.

A filter might only account for instances of special elements when they occur: This may leave special elements in the data that did not match the filter position, but still may be dangerous.

Common Consequences

Scope:
Integrity
Impact:
Unexpected State

Related Weaknesses