Weakness (CWE)

CWE-1474: Non-Equivalent Data Transformation

Class Incomplete

The product parses or transforms data into another format,
structure, or representation, but the newly-produced data
is not semantically equivalent to the original data.

How to prevent it (1 mitigation)

Architecture and Design, Implementation

Validate the transformed data against what
was expected to be produced. If the data is complex
and free-form with some "special elements" in them,
consider re-parsing the output to ensure that it
matches expectations.

Source: MITRE CWE-1474

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.