CWE-75

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Medium

Description

The product does not adequately filter user-controlled input for special elements with control implications.

Potential Impact

How to Fix

Requirements

Programming languages and supporting technologies might be chosen which are not subject to these issues.

Implementation

Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-75 vulnerabilities in your codebase.

Get Security Assessment