About GET A DEMO

Backslash Vulnerability Database

Permissive Regular Expression

Permissive Regular Expression

CWE-625

Short description

The product uses a regular expression that does not sufficiently restrict the set of allowed values.

Extended description

not identifying the beginning and end of the target string
using wildcards instead of acceptable character ranges
others

Best practices to prevent this CWE

Phase: Implementation

When applicable, ensure that the regular expression marks beginning and ending string patterns, such as "/^string$/" for Perl.

Recently published CVEs

CVE-2023-6544

Prioritize and Uncover Reachable Vulnerabilities in Your Application Code

Identify externally reachable data flows and vulnerabilities for effective risk mitigation

© 2023 Backslash. 28 HaArba'a St., Tel-Aviv Privacy Policy | Terms of Use