CWE-90
Overview
- CWE ID
- 90
- CWE Name
- Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downst
Extended Description
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 943 | 1000 | ChildOf | Primary |