CWE-1289: Improper Validation of Unsafe Equivalence in Input, page 2

Filter

The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.

What the weakness is: CWE-1289 at MITRE. All weaknesses

Ask an AI about CWE-1289

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-1289: Improper Validation of Unsafe Equivalence in Input and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1289.html and https://cve.bz/cve/cwe/1289?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

4.7CVE-2024-42218EPSS 0.2%2024-08-06
1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms.
9.8CVE-2022-0675EPSS 0.9%2022-03-02
In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the syst…