{"@ID": "1215", "@Name": "Data Validation Issues", "@Status": "Draft", "Summary": "Weaknesses in this category are related to a software system's components for input validation, output validation, or other kinds of validation. Validation is a frequently-used technique for ensuring that data conforms to expectations before it is further processed as input or output.  There are many varieties of validation (see CWE-20, which is just for input validation). Validation is distinct from other techniques that attempt to modify data before processing it, although developers may consider all attempts to product \"safe\" inputs or outputs as some kind of validation.  Regardless, validation is a powerful tool that is often used to minimize malformed data from entering the system, or indirectly avoid code injection or other potentially-malicious patterns when generating output. The weaknesses in this category could lead to a degradation of the quality of data flow in a system if they are not addressed.", "Relationships": {"Has_Member": [{"@CWE_ID": "112", "@View_ID": "699"}, {"@CWE_ID": "179", "@View_ID": "699"}, {"@CWE_ID": "183", "@View_ID": "699"}, {"@CWE_ID": "184", "@View_ID": "699"}, {"@CWE_ID": "606", "@View_ID": "699"}, {"@CWE_ID": "641", "@View_ID": "699"}, {"@CWE_ID": "1173", "@View_ID": "699"}, {"@CWE_ID": "1284", "@View_ID": "699"}, {"@CWE_ID": "1285", "@View_ID": "699"}, {"@CWE_ID": "1286", "@View_ID": "699"}, {"@CWE_ID": "1287", "@View_ID": "699"}, {"@CWE_ID": "1288", "@View_ID": "699"}, {"@CWE_ID": "1289", "@View_ID": "699"}]}, "Mapping_Notes": {"Usage": "Prohibited", "Rationale": "This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.", "Comments": "See member weaknesses of this category.", "Reasons": {"Reason": {"@Type": "Grouping"}}}, "Notes": {"Note": {"@Type": "Relationship", "xhtml:p": "CWE-20 (Improper Input Validation) is not included in this category because it is a Class level, and this category focuses more on Base level weaknesses.  Also note that other kinds of weaknesses besides improper validation are included as members of this category.", "#text_blocks": ["CWE-20 (Improper Input Validation) is not included in this category because it is a Class level, and this category focuses more on Base level weaknesses.  Also note that other kinds of weaknesses besides improper validation are included as members of this category."]}}, "Content_History": {"Submission": {"Submission_Name": "CWE Content Team", "Submission_Organization": "MITRE", "Submission_Date": "2019-12-30", "Submission_Version": "4.0", "Submission_ReleaseDate": "2020-02-24"}, "Modification": [{"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2020-06-25", "Modification_Version": "4.1", "Modification_ReleaseDate": "2020-06-25", "Modification_Comment": "updated Description, Name, Relationship_Notes, Relationships"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-04-27", "Modification_Version": "4.11", "Modification_ReleaseDate": "2023-04-27", "Modification_Comment": "updated Mapping_Notes, Relationships"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-06-29", "Modification_Version": "4.12", "Modification_ReleaseDate": "2023-06-29", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2026-10-28", "Modification_Version": "5.0", "Modification_ReleaseDate": "2026-10-28", "Modification_Comment": "updated Mapping_Notes, Type"}], "Previous_Entry_Name": {"@Date": "2020-02-26", "#text": "Input Validation Issues"}}, "entry_type": "Grouping"}