CWE-1173

Improper Use of Validation Framework

Medium

Description

The product does not use, or incorrectly uses, an input validation framework that is provided by the source language or an independent library.

Potential Impact

Integrity: Unexpected State

How to Fix

Implementation

Properly use provided input validation frameworks.

Detection Methods

Automated Static Analysis: Some instances of improper input validation can be detected using automated static analysis. A static analysis tool might allow the user to specify which application-specific methods...

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1173 vulnerabilities in your codebase.

Get Security Assessment