이름: 7PK - Input Validation and Representation

This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that exist when an application does not properly validate or represent input. According to the authors of the Seven Pernicious Kingdoms, "Input validation and representation problems are caused by metacharacters, alternate encodings and numeric representations. Security problems result from trusting input."

CWE 구성원 목록

CWE-20: Improper Input Validation 기본

CWE-77: Improper Neutralization of Special Elements used in a Command 기본

CWE-79: Improper Neutralization of Input During Web Page Generation 기본

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본

CWE-99: Improper Control of Resource Identifiers 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
7 Pernicious Kingdoms		2017-05-05 +00:00	2017-05-05 +00:00	2.11

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2017-11-08 +00:00	updated Description, Name, References
CWE Content Team	MITRE	2020-02-24 +00:00	updated References
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

참고 자료

REF-6

Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors
Katrina Tsipenyuk, Brian Chess, Gary McGraw.
https://cwe.mitre.org/documents/sources/SevenPerniciousKingdoms.pdf

CWE-1005 카테고리 상세 정보

CWE-1005