CWE-1005 カテゴリ詳細

CWE-1005

7PK - Input Validation and Representation
2017-05-05 +00:00
Draft
2023-06-29 +00:00
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
通知を管理する

名前: 7PK - Input Validation and Representation

This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that exist when an application does not properly validate or represent input. According to the authors of the Seven Pernicious Kingdoms, "Input validation and representation problems are caused by metacharacters, alternate encodings and numeric representations. Security problems result from trusting input."

CWE の情報

脆弱性マッピングノート

理由 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
コメント : See member weaknesses of this category.

登録情報

名前 組織 日付 リリース日 Version
7 Pernicious Kingdoms 2017-05-05 +00:00 2017-05-05 +00:00 2.11

変更履歴

名前 組織 日付 コメント
CWE Content Team MITRE 2017-11-08 +00:00 updated Description, Name, References
CWE Content Team MITRE 2020-02-24 +00:00 updated References
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

参考文献

REF-6

Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors
Katrina Tsipenyuk, Brian Chess, Gary McGraw.
https://cwe.mitre.org/documents/sources/SevenPerniciousKingdoms.pdf