CWE-95

GPTKB entity

Statements (14)
Predicate Object
gptkbp:instance_of gptkb:Common_Weakness_Enumeration
gptkbp:bfsLayer 6
gptkbp:bfsParent gptkb:CWE-74
gptkbp:associated_with Web applications
gptkbp:category Input Validation and Representation
gptkbp:difficulty gptkb:High
gptkbp:example Cross-site scripting (XSS) attacks
https://www.w3.org/2000/01/rdf-schema#label CWE-95
gptkbp:impact Security vulnerabilities
gptkbp:is_described_as The software does not properly neutralize special elements that may be used by a downstream component.
gptkbp:is_protected_by Input validation
gptkbp:is_referenced_in gptkb:API
gptkbp:name Improper Neutralization of Special Elements in Output Used by a Downstream Component
gptkbp:related_to Injection Flaws