CWE-1173Improper Use of Validation Framework

Description

The product does not use, or incorrectly uses, an input validation framework that is provided by the source language, framework, or an independent library.

Common consequences

• Integrity→Unexpected State
  Unchecked input leads to cross-site scripting, process control, and SQL injection vulnerabilities, among others.
• Other→Reduce Maintainability
  Not using provided input validation frameworks can hurt the maintainability of code, since future developers may not recognize the downstream input validation that is required or expected in place of a validation framework.

Potential mitigations

• Implementation
  Properly use provided input validation frameworks.

Related CWEs

Recent CVEs classified under this CWE