CWE-185
Overview
- CWE ID
- 185
- CWE Name
- Incorrect Regular Expression
- CWE Abstraction
- Class
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software specifies a regular expression in a way that causes data to be improperly matched or compared.
Extended Description
When the regular expression is used in protection mechanisms such as filtering or validation, this may allow an attacker to bypass the intended restrictions on the incoming data.