Skip to content
OpenAdvisories

Weakness (CWE)

CWE-180: Incorrect Behavior Order: Validate Before Canonicalize

Variant Draft

The product validates input before it is canonicalized.

How to prevent it (1 mitigation)

  1. Implementation

    Inputs should be decoded and canonicalized to the application's current internal representation before being validated (CWE-180). Make sure that the application does not decode the same input twice (CWE-174). Such errors could be used to bypass allowlist validation schemes by introducing dangerous inputs after they have been checked.

Source: MITRE CWE-180

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.