Weakness (CWE)
CWE-75: Failure to Sanitize Special Elements into a Different Plane
Class Draft Mapping discouraged
The product does not adequately filter user-controlled input for special elements with control implications.
How to prevent it (2 mitigations)
-
Requirements
Programming languages and supporting technologies might be chosen which are not subject to these issues.
-
Implementation
Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.
Source: MITRE CWE-75
0 results · Clear filters · Feed
Nothing found.