CWE-1474 상세 정보

CWE-1474

Non-Equivalent Data Transformation
2026-10-28
00h00 +00:00
Incomplete
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: Non-Equivalent Data Transformation

The product parses or transforms data into another format, structure, or representation, but the newly-produced data is not semantically equivalent to the original data.

일반 정보

취약점 도입 방식

Architecture and Design
Implementation

적용 가능한 플랫폼

언어

클래스: Not Language-Specific (Undetermined)

아키텍처

클래스: Not Architecture-Specific (Undetermined)

기술

클래스: Not Technology-Specific (Undetermined)

일반적인 결과

범위 영향 가능성
Integrity
Other
Bypass Protection Mechanism, Unexpected State, Varies by Context

관찰된 예시

참고 자료 설명

CVE-2022-48279

Web Application Firewall (WAF) does not parse HTTP multipart requests correctly, allowing bypass.

CVE-2022-24723

JavaScript URL library does not correctly parse URLs with leading whitespace.

잠재적 완화 방법

Phases : Architecture and Design // Implementation

탐지 방법

Manual Analysis

효과성 : Moderate

Automated Dynamic Analysis

효과성 : Moderate

취약점 매핑 메모

근거 : This CWE Entry is a Class and might have lower-level children that would be more appropriate
댓글 : Examine children of this entry to see if there is a better fit

메모

This entry was created in CWE 5.0 to address known gaps in CWE coverage. It is not as complete as other new entries that were published in recent years. The CWE Team plans to work with the CWE community to make this entry more complete in later 5.x releases.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2026-10-24 +00:00 2026-10-28 +00:00 5.0