This page is experimental and may change significantly in future releases.
Improper Control of Resource Identifiers ('Resource Injection')
Properties
id: d3f:CWE-99
- name
- Improper Control of Resource Identifiers ('Resource Injection')
- definition
- The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.
- synonyms
- Insecure Direct Object Reference
Neighbors
CWE-99 has no direct neighbors in this release.