CWEweakness

CWE-792 Incomplete Filtering of One or More Instances of Special Elements

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

Common consequences

• Integrity: Unexpected State

Related

Child of · CWE (1)

  • CWE-791 Incomplete Filtering of Special Elements weakness

Referenced by CVE · weakness (5)

  • CVE-2025-12758 Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in… vulnerability
  • CVE-2025-47779 Asterisk is an open-source private branch exchange (PBX). vulnerability
  • CVE-2023-25608 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2… vulnerability
  • CVE-2022-22297 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb… vulnerability
  • CVE-2023-20057 A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an… vulnerability

Referenced by CWE · child of (2)

  • CWE-793 Only Filtering One Instance of a Special Element weakness
  • CWE-794 Incomplete Filtering of Multiple Instances of Special Elements weakness