CWE-1289Improper Validation of Unsafe Equivalence in Input

Description

The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.

Common consequences

• Other→Varies by Context,Bypass Protection Mechanism
  Attackers can sometimes bypass input validation schemes by finding inputs that appear to be safe, but will be dangerous when processed at a lower layer or by a downstream component. For example, a simple XSS protection mechanism might try t

Potential mitigations

• Implementation
  [object Object]

Related CWEs

Recent CVEs classified under this CWE