Detail CWE-1474

CWE-1474

Non-Equivalent Data Transformation
2026-10-28
00h00 +00:00
Incomplete
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Non-Equivalent Data Transformation

The product parses or transforms data into another format, structure, or representation, but the newly-produced data is not semantically equivalent to the original data.

Informasi Umum

Mode Pengenalan

Architecture and Design
Implementation

Platform yang Berlaku

Bahasa

Kelas: Not Language-Specific (Undetermined)

Arsitektur

Kelas: Not Architecture-Specific (Undetermined)

Teknologi

Kelas: Not Technology-Specific (Undetermined)

Konsekuensi Umum

Cakupan Dampak Kemungkinan
Integrity
Other		Bypass Protection Mechanism, Unexpected State, Varies by Context

Contoh yang Diamati

Referensi Deskripsi

CVE-2022-48279

Web Application Firewall (WAF) does not parse HTTP multipart requests correctly, allowing bypass.

CVE-2022-24723

JavaScript URL library does not correctly parse URLs with leading whitespace.

Mitigasi yang Memungkinkan

Phases : Architecture and Design // Implementation

Metode Deteksi

Manual Analysis

Efektivitas : Moderate

Automated Dynamic Analysis

Efektivitas : Moderate

Catatan Pemetaan Kerentanan

Justifikasi : This CWE Entry is a Class and might have lower-level children that would be more appropriate
Komentar : Examine children of this entry to see if there is a better fit

Catatan

This entry was created in CWE 5.0 to address known gaps in CWE coverage. It is not as complete as other new entries that were published in recent years. The CWE Team plans to work with the CWE community to make this entry more complete in later 5.x releases.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2026-10-24 +00:00 2026-10-28 +00:00 5.0
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.