Base weakness
Draft
CWE-184: Incomplete List of Disallowed Inputs
Also known as: Denylist / Deny List, Blocklist / Block List, Blacklist / Black List
The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.
91
Recorded CVEs
With this primary weakness
1
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
CWE-184 (Incomplete List of Disallowed Inputs) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.