CWE-75: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product does not adequately filter user-controlled input for special elements with control implications.
常见后果
影响范围: Integrity Confidentiality Availability
技术影响: Modify Application Data Execute Unauthorized Code or Commands
潜在缓解措施
阶段: Requirements
描述: Programming languages and supporting technologies might be chosen which are not subject to these issues.
阶段: Implementation
描述: Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.
引入模式
| 阶段 | 说明 |
|---|---|
| Implementation | REALIZATION: This weakness is caused during implementation of an architectural security tactic. |
适用平台
编程语言
分类映射
| 分类名称 | 条目ID | 条目名称 | 映射适配度 |
|---|---|---|---|
| PLOVER | - | Special Element Injection | - |