Variant weakness
Incomplete
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.
Last updated
Incomplete filtering of this nature involves either: only filtering a single instance of a special element when more exist, or not filtering all instances or all elements where multiple special elements exist.
3 recorded CVEs are caused by CWE-792 (Incomplete Filtering of One or More Instances of Special Elements). The highest-severity and most recent are shown first.
What can happen when CWE-792 is exploited.
Unexpected State
Affects: Integrity
Typically introduced during these phases of the software lifecycle.
MITRE examples of the weakness in code.
The following code takes untrusted input and uses a regular expression to filter "../" from the input. It then appends this result to the /home/user/ directory and attempts to read the file in the final resulting path.
Vulnerable example
my $Username = GetUntrustedInput();Attack input
../../../etc/passwdResulting query
../../etc/passwdResulting query
/home/user/../../etc/passwdCommon questions about CWE-792.
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.
Get an alert when a new CWE-792 CVE affects your products, with AI-written analysis and remediation steps.