logo

340 Lack of data validation - Special Characters


Description

The system does not validate that special characters are not entered in some fields.


Impact

Cause unexpected behavior of the application.


Recommendation

Validate in all fields that no special characters are entered.


Threat

Anonymous attacker from the Internet.


Expected Remediation Time

30 minutes.


Score 4.0

Default score using CVSS 4.0. It may change depending on the context of the src.

Base 4.0

  • Attack vector: N
  • Attack complexity: L
  • Attack Requirements: N
  • Privileges required: N
  • User interaction: N
  • Confidentiality (VC): N
  • Integrity (VI): L
  • Availability (VA): N
  • Confidentiality (SC): N
  • Integrity (SI): N
  • Availability (SA): N

Threat 4.0

  • Exploit maturity: U

Requirements


Fixes


Last updated

2024/02/19