CWE-943Improper Neutralization of Special Elements in Data Query Logic

Description

The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

[object Object]

Common consequences

• Confidentiality,Integrity,Availability,Access Control→Bypass Protection Mechanism,Read Application Data,Modify Application Data,Varies by Context

Related CWEs

Recent CVEs classified under this CWE