CWE-472
Overview
- CWE ID
- 472
- CWE Name
- External Control of Assumed-Immutable Web Parameter
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.