CWE-1471
Insufficiently Controlled Parser Differential
2026-10-28
00h00 +00:00
00h00 +00:00
Incomplete
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
名前: Insufficiently Controlled Parser Differential
The product uses a common specification or format that is shared
between multiple components or entities, but the components have
different parsers that can interpret the same input in different,
security-relevant ways.
一般情報
導入モード
Array適用可能なプラットフォーム
言語
クラス： Not Language-Specific (Undetermined)アーキテクチャ
クラス： Not Architecture-Specific (Undetermined)テクノロジー
クラス： Not Technology-Specific (Undetermined)クラス： Web Based (Undetermined)
一般的な結果
| スコープ | 影響 | 可能性 |
|---|---|---|
| Integrity Authorization Access Control | Gain Privileges or Assume Identity, Bypass Protection Mechanism, Hide Activities, Alter Execution Logic, Unexpected State, Varies by Context |
観察された例
| 参考文献 | 説明 |
|---|---|
CVE-2026-83611 | JavaScript-based DOM parser silently accepts certain malformed end tags such as "" due to a parser differential, possibly preventing the detection of malformed input. |
潜在的な緩和策
Phases : Architecture and Design // Implementation検出方法
Automated Dynamic Analysis
脆弱性マッピングノート
理由 : This CWE Entry is a Class and might have lower-level children that would be more appropriateコメント : Examine children of this entry to see if there is a better fit
参考文献
REF-1575
Parser Weakness Enumeration: Definition and Preliminary AssessmentDenley Lam, Letitia Li, Anthony Gabrielson.
https://ieeexplore.ieee.org/document/10305625
REF-1576
A Survey of Parser Differential Anti-PatternsSameed Ali, Sean W. Smith.
https://ieeexplore.ieee.org/document/10188627
REF-1577
Parser DifferentialNon-Human Identity Management Group.
https://nhimg.org/glossary/parser-differential/
登録情報
| 名前 | 組織 | 日付 | リリース日 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 5.0 |
