이름: SEI CERT Oracle Secure Coding Standard for Java - Guidelines 00. Input Validation and Data Sanitization (IDS)

Weaknesses in this category are related to the rules and recommendations in the Input Validation and Data Sanitization (IDS) section of the SEI CERT Oracle Secure Coding Standard for Java.

CWE 구성원 목록

CWE-116: Improper Encoding or Escaping of Output 기본

CWE-180: Incorrect Behavior Order: Validate Before Canonicalize 기본

CWE-289: Authentication Bypass by Alternate Name 기본

CWE-117: Improper Output Neutralization for Logs 기본

CWE-144: Improper Neutralization of Line Delimiters 기본

CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences 기본

CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) 기본

CWE-134: Use of Externally-Controlled Format String 기본

CWE-78: Improper Neutralization of Special Elements used in an OS Command 기본

CWE-182: Collapse of Data into Unsafe Value 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2018-12-11 +00:00	2019-01-03 +00:00	3.2

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

참고 자료

REF-814

SEI CERT Oracle Coding Standard for Java : Rule 00. Input Validation and Data Sanitization (IDS)
The Software Engineering Institute.
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?pageId=88487865

REF-996

SEI CERT Oracle Coding Standard for Java : Rec 00. Input Validation and Data Sanitization (IDS)
The Software Engineering Institute.
https://wiki.sei.cmu.edu/confluence/pages/viewpage.action?pageId=88487337

CWE-1134 카테고리 상세 정보

CWE-1134