CAPEC-78 Using Escaped Slashes in Alternate Encoding

abstraction: detailedstatus: active

This attack targets the use of the backslash in alternate encoding. An adversary can provide a backslash as a leading character and causes a parser to believe that the next character is special. This is called an escape. By using that trick, the adversary tries to exploit alternate ways to encode the same character which leads to filter problems and opens avenues to attack.

likelihood: Highseverity: High
01

weaknesses (10)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.