|
|
|
|
CWE-140 Individual Dictionary Definition (Draft 9)
Weakness ID
| Status: Draft 140 (Weakness Base) | | Description | Summary The software does not properly
sanitize delimiters. | | Potential Mitigations | Developers should anticipate that delimiters will be injected/removed/manipulated in
the input vectors of their software system. Use an appropriate combination of black lists and
white lists to ensure only valid, expected and appropriate input is processed by the
system. | | Relationships | | | Source Taxonomies | PLOVER - Delimiter Problems | | Related Attack Patterns | | CAPEC-ID | Attack Pattern Name |
|---|
| 15 | Command Delimiters |
|
|