The product specifies a regular expression in a way that causes data to be improperly matched or compared.
MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out: