CAPEC Related Weakness
Using Leading 'Ghost' Character Sequences to Bypass Input Filters
CWE-20Improper Input Validation
CWE-41Improper Resolution of Path Equivalence
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CWE-171
CWE-172Encoding Error
CWE-173Improper Handling of Alternate Encoding
CWE-179Incorrect Behavior Order: Early Validation
CWE-180Incorrect Behavior Order: Validate Before Canonicalize
CWE-181Incorrect Behavior Order: Validate Before Filter
CWE-183Permissive Whitelist
CWE-184Incomplete Blacklist
CWE-697Insufficient Comparison
CWE-707Improper Enforcement of Message or Data Structure
Using Alternative IP Address Encodings
CWE-41Improper Resolution of Path Equivalence
CWE-180Incorrect Behavior Order: Validate Before Canonicalize
CWE-291Reliance on IP Address for Authentication
CWE-345Insufficient Verification of Data Authenticity
CWE-697Insufficient Comparison
CWE-707Improper Enforcement of Message or Data Structure
Back to Top