|
|
|
|
CWE-75: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)| | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) |
|
| Weakness ID: 75 (Weakness Class) | | Status: Draft |
 Description
Description Summary The software does not adequately filter user-controlled input for special elements with control implications.
Time of Introduction
- Architecture and Design
- Implementation
Common Consequences | Scope | Effect |
|---|
Integrity Confidentiality Availability | Technical Impact: Modify application
data; Execute unauthorized code or
commands |
Potential Mitigations
Phase: Requirements Programming languages and supporting technologies might be chosen
which are not subject to these issues. |
Phase: Implementation Utilize an appropriate mix of white-list and black-list parsing to
filter special element syntax from all input. |
Relationships Taxonomy Mappings | Mapped Taxonomy Name | Node ID | Fit | Mapped Node Name |
|---|
| PLOVER | | | Special Element Injection |
Content History | Submissions |
|---|
| Submission Date | Submitter | Organization | Source |
|---|
| PLOVER | | Externally Mined | | | Modifications |
|---|
| Modification Date | Modifier | Organization | Source |
|---|
| 2008-07-01 | Eric Dalci | Cigital | External | | updated Time_of_Introduction | | 2008-09-08 | CWE Content Team | MITRE | Internal | | updated Relationships,
Taxonomy_Mappings | | 2010-12-13 | CWE Content Team | MITRE | Internal | | updated Description | | 2011-06-01 | CWE Content Team | MITRE | Internal | | updated Common_Consequences | | 2012-05-11 | CWE Content Team | MITRE | Internal | | updated Relationships | | 2012-10-30 | CWE Content Team | MITRE | Internal | | updated Potential_Mitigations | | Previous Entry Names |
|---|
| Change Date | Previous Entry
Name |
|---|
| 2008-04-11 | Special Element
Injection | |
|
