Cyber Resilience

CWE · MITRE source

CWE-790Improper Filtering of Special Elements

Abstraction: Class · CVEs in our corpus: 15

The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • ID.RA-01
  • PR.PS-06
  • SI-10 Information Input Validation
  • SI-15 Information Output Filtering
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-45239 7.69.80.01812023-10-06
CVE-2023-22578 7.510.00.00832023-02-16
CVE-2021-43802 7.39.90.01992021-12-09
CVE-2024-31616 6.78.80.00832024-04-23
CVE-2024-42416 6.28.80.00402024-09-05
CVE-2026-23285.87.50.00312026-03-30
CVE-2026-113315.87.50.00422026-07-22
CVE-2025-272605.77.50.00212026-03-25
CVE-2026-9658 5.67.30.00232026-05-28
CVE-2025-15576 5.17.50.00112026-03-09
CVE-2024-6540 4.65.70.00392024-07-15
CVE-2025-0431 4.55.80.00402025-03-19
CVE-2024-43442 4.04.90.00402024-08-26
CVE-2024-43443 3.94.90.00362024-08-26
CVE-2024-47984 3.74.40.00462024-12-13