CWE-796 Only Filtering Special Elements Relative to a Marker

variant

The product receives data from an upstream component, but only accounts for special elements positioned relative to a marker (e.g. "at the beginning/end of a string; the second argument"), thereby missing remaining special elements that may exist before sending it to a downstream component.

parent weaknesses

Broader classes this is a kind of.

CWE-795Only Filtering Special Elements at a Specified Location

source

Where this definition is published.

MITREUS

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan