Use of Non-Canonical URL Paths for Authorization Decisions

Properties

id: d3f:CWE-647

name
Use of Non-Canonical URL Paths for Authorization Decisions
definition
The product defines policy namespaces and makes authorization decisions based on the assumption that a URL is canonical. This can allow a non-canonical URL to bypass the authorization.
json

Neighbors

CWE-647 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.