CWE-348 (使用不可信的源) — Vulnerability Class 59

CWE-348 represents a trust relationship management weakness where software incorrectly relies on a data source with insufficient verification or security controls. This flaw typically arises when applications accept input from external entities, such as user-supplied fields or unvalidated network packets, instead of prioritizing internal, authenticated sources. Attackers exploit this by injecting malicious payloads or manipulating data through the less trusted channel, bypassing intended security checks and potentially leading to injection attacks, privilege escalation, or data corruption. To mitigate this risk, developers must rigorously validate all external inputs against strict allowlists and implement robust authentication mechanisms. By consistently prioritizing verified, internal data sources and applying defense-in-depth strategies, engineers can ensure that critical operations rely only on trustworthy information, thereby neutralizing the threat of compromised data integrity.