이름: Insufficiently Controlled Parser Differential

The product uses a common specification or format that is shared between multiple components or entities, but the components have different parsers that can interpret the same input in different, security-relevant ways.

일반 정보

취약점 도입 방식

Array

적용 가능한 플랫폼

언어

클래스: Not Language-Specific (Undetermined)

아키텍처

클래스: Not Architecture-Specific (Undetermined)

기술

클래스: Not Technology-Specific (Undetermined)
클래스: Web Based (Undetermined)

일반적인 결과

범위	영향	가능성
Integrity Authorization Access Control	Gain Privileges or Assume Identity, Bypass Protection Mechanism, Hide Activities, Alter Execution Logic, Unexpected State, Varies by Context

관찰된 예시

참고 자료	설명
CVE-2026-83611	JavaScript-based DOM parser silently accepts certain malformed end tags such as "" due to a parser differential, possibly preventing the detection of malformed input.

잠재적 완화 방법

Phases : Architecture and Design // Implementation

탐지 방법

Automated Dynamic Analysis

취약점 매핑 메모

근거 : This CWE Entry is a Class and might have lower-level children that would be more appropriate
댓글 : Examine children of this entry to see if there is a better fit

참고 자료

REF-1575

Parser Weakness Enumeration: Definition and Preliminary Assessment
Denley Lam, Letitia Li, Anthony Gabrielson.
https://ieeexplore.ieee.org/document/10305625

REF-1576

A Survey of Parser Differential Anti-Patterns
Sameed Ali, Sean W. Smith.
https://ieeexplore.ieee.org/document/10188627

REF-1577

Parser Differential
Non-Human Identity Management Group.
https://nhimg.org/glossary/parser-differential/

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2026-10-26 +00:00	2026-10-28 +00:00	5.0

CWE-1471 상세 정보

CWE-1471