CWE-75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Description

The product does not adequately filter user-controlled input for special elements with control implications.

Common consequences

• Integrity,Confidentiality,Availability→Modify Application Data,Execute Unauthorized Code or Commands

Potential mitigations

• Requirements
  Programming languages and supporting technologies might be chosen which are not subject to these issues.
• Implementation
  Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.

Related CWEs

Recent CVEs classified under this CWE