Variant weakness
Draft
CWE-181: Incorrect Behavior Order: Validate Before Filter
Also known as: Validate-before-cleanse
The product validates data before it has been filtered, which prevents the product from detecting data that becomes invalid after the filtering step.
0
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
This can be used by an attacker to bypass the validation and launch attacks that expose weaknesses that would otherwise be prevented, such as injection.