CWE-625Permissive Regular Expression

Description

The product uses a regular expression that does not sufficiently restrict the set of allowed values.

[object Object]

Common consequences

• Access Control→Bypass Protection Mechanism

Potential mitigations

• Implementation
  When applicable, ensure that the regular expression marks beginning and ending string patterns, such as "/^string$/" for Perl.

Related CWEs

Recent CVEs classified under this CWE