Common Weakness Enumeration
CWE Definition / CWE-777
CWE-777: Regular Expression without Anchors
The product uses a regular expression to perform neutralization, but the regular expression is not anchored and may allow malicious or malformed data to slip through.
Published:30 Jun 2009
Organization:MITRE
Modified:11 Dec 2025
Related Weakness
CWE-625: Permissive Regular Expression
