Common Weakness Enumeration

    CWE Definition / CWE-349

    CWE-349: Acceptance of Extraneous Untrusted Data With Trusted Data

    The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-345: Insufficient Verification of Data Authenticity