CWE-181: Incorrect Behavior Order: Validate Before Filter
VariantDraft
The product validates data before it has been filtered, which prevents the product from detecting data that becomes invalid after the filtering step.
View on MITREBack to CWE Lookup
Extended Description
This can be used by an attacker to bypass the validation and launch attacks that expose weaknesses that would otherwise be prevented, such as injection.
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific