Everything about Improper input validation

🧭 Start here: a 6-step reading path

1. Read the overview: Improper input validationA 5-minute orientation
2. Go sideways: Out-of-bounds readA closely related topic
3. Go sideways: Server-side request forgeryA closely related topic

🏆 Landmark papers (most cited)

• No matching papers found.

📚 Books worth reading

Open Library didn't respond; try again in a moment.

🔗 Related topics

• Out-of-bounds read In computer security and programming, an out-of-bounds read is a software anomaly where a program, while reading data from a buffer, reads outside of the…
• Server-side request forgery Server-side request forgery (SSRF) is a computer security vulnerability that enables an attacker to send requests from a vulnerable server to internal…
• Mass assignment vulnerability Mass assignment (otherwise known as Autobinding in Spring MVC and ASP NET MVC, or Object injection in PHP) is a computer vulnerability where an active…
• Vulnerability management Vulnerability management is the "cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating" software vulnerabilities, which…
• SQL injection In computing, SQL injection is a code injection technique used to attack data-driven applications, in which malicious SQL statements are inserted into…
• Path traversal attack A directory traversal, path traversal, or dot-dot-slash attack exploits insufficient security validation or sanitization of user-supplied file names, such…
• Code injection Code injection is a computer security exploit where a program fails to correctly process external data, such as user input, causing it to interpret the…
• XML external entity attack XML External Entity attack, or simply XXE attack, is a type of attack against an application that parses XML input. This attack occurs when XML input containing…