CWE-179 – Incorrect Behavior Order: Early Validation
Description The software validates input before applying protection mechanisms that modify the input, which could allow an attacker to bypass the validation via dangerous inputs...
CWE-180 – Incorrect Behavior Order: Validate Before Canonicalize
Description The software validates input before it is canonicalized, which prevents the software from detecting data that becomes invalid after the canonicalization step. This can...
CWE-155 – Improper Neutralization of Wildcards or Matching Symbols
Description The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as wildcards...