CWE-346 源验证错误 类弱点 230 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-346 属于源验证错误漏洞，指产品未能正确验证数据或通信来源的有效性。攻击者通常通过伪造请求源或篡改通信上下文，诱导系统处理恶意数据，从而绕过安全控制或执行未授权操作。开发者应实施严格的源验证机制，如校验请求头、使用数字签名或验证通信通道，确保数据确实来自可信且预期的源头，以杜绝此类风险。
IntentFilter filter = new IntentFilter("com.example.RemoveUser"); MyReceiver receiver = new MyReceiver(); registerReceiver(receiver, filter); public class DeleteReceiver extends BroadcastReceiver { @Override public void onReceive(Context context, Intent intent) { int userID = intent.getIntExtra("userID"); destroyUserData(userID); } }// Android @Override public boolean shouldOverrideUrlLoading(WebView view, String url){ if (url.substring(0,14).equalsIgnoreCase("examplescheme:")){ if(url.substring(14,25).equalsIgnoreCase("getUserInfo")){ writeDataToView(view, UserData); return false; } else{ return true; } } }// iOS -(BOOL) webView:(UIWebView *)exWebView shouldStartLoadWithRequest:(NSURLRequest *)exRequest navigationType:(UIWebViewNavigationType)exNavigationType { NSURL *URL = [exRequest URL]; if ([[URL scheme] isEqualToString:@"exampleScheme"]) { NSString *functionString = [URL resourceSpecifier]; if ([functionString hasPrefix:@"specialFunction"]) { // Make data available back in webview. UIWebView *webView = [self writeDataToView:[URL query]]; } return NO; } return YES; }CWE-346（源验证错误） 是常见的弱点类别，本平台收录该类弱点关联的 230 条 CVE 漏洞。