CWEweakness
CWE-1174 ASP.NET Misconfiguration: Improper Model Validation
- Abstraction
- Variant
- Structure
- Simple
- Status
- Draft
- Languages
- ASP.NET
- CWE version
- 5.0
Description
The ASP.NET application does not use, or incorrectly uses, the model validation framework.
Common consequences
• Integrity: Unexpected State — Unchecked input leads to cross-site scripting, process control, and SQL injection vulnerabilities, among others.
Related
Child of · CWE (1)
- CWE-1173 Improper Use of Validation Framework weakness
Referenced by CVE · weakness (1)
- CVE-2023-47310 A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets. vulnerability