CWE-473
PHP External Variable Modification
About
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
Common consequences
- Integrity → Modify Application Data
Mitigations
- Requirements, Implementation: Carefully identify which variables can be controlled or influenced by an external user, and consider adopting a naming convention to emphasize when externally modifiable variables are being used. An application should be reluctant to trust variables that have been initialized outside of its trust boundary. Ensure adequate checking is performed when relying on input fr
CVEs with this weakness
Frequently asked questions
What is CWE-473?
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
Which platforms does CWE-473 affect?
CWE-473 has been observed on: PHP.
How many CVEs does Rainforest track for CWE-473?
Rainforest Labs currently tracks 1 published CVEs mapped to CWE-473. They are listed on this page.
Empower Your Security Strategy with Rainforest
Discover vulnerabilities early, prioritize critical threats, and protect what truly matters. Rainforest streamlines your security operations, saving you time and reducing costs, so you can focus on what drives your business forward.