Weaknesses of type CWE-116

371 results

Codificação ou escape inadequado de saída

A aplicação falha em codificar ou fazer escape apropriado dos dados antes de enviá-los ao usuário, permitindo que caracteres especiais sejam interpretados como código (HTML, JavaScript, SQL, etc.). Isso abre brecha para injeção de payload malicioso, especialmente XSS em contextos web.

Example

Um formulário de busca que exibe o termo pesquisado sem escape: se o usuário digita '<img src=x onerror=alert(1)>', a página renderiza o JavaScript em vez de mostrar o texto como string inócua.

How to mitigate

Aplique escape contextual (HTML entity encoding para HTML, JavaScript encoding para scripts, URL encoding para parâmetros) usando bibliotecas consolidadas da sua stack (DOMPurify, OWASP ESAPI, etc.). Validar entrada é primeira linha de defesa, mas escape de saída é crítico e obrigatório.

CVE-2025-4084MEDIUMPotential local code execution in "copy as cURL" commandEPSS 0.4%CVE-2024-47845MEDIUMCSS sanitizer used incorrectly, and is easily bypassedEPSS 0.4%CVE-2024-28245MEDIUMKaTeX's \includegraphics does not escape filenameEPSS 0.4%CVE-2025-46583MEDIUMDOS Vulnerability in ZTE MC889A Pro productEPSS 0.4%CVE-2025-59936CRITICALget-jwks poisoned JWKS cache allows post-fetch issuer validation bypassEPSS 0.4%CVE-2026-70609MEDIUMElectron: DevTools JavaScript Injection via Unsanitized Dock State ParameterEPSS 0.4%CVE-2025-30657MEDIUMJunos OS: Processing of a specific BGP update causes the SRRD process to crashEPSS 0.4%CVE-2024-6329MEDIUMImproper Encoding or Escaping of Output in GitLabEPSS 0.4%CVE-2025-32078MEDIUMXSSes and potential RCE in Special:VersionCompareEPSS 0.4%CVE-2025-25029MEDIUMIBM Security Guardium information disclosureEPSS 0.4%CVE-2025-24338HIGHA vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attEPSS 0.4%CVE-2026-43971MEDIUMLink Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1EPSS 0.4%CVE-2024-46547HIGHA vulnerability was found in Romain Bourdon Wampserver all versions (discovered in v3.2.3 and v3.2.6) where unauthorized users could access EPSS 0.4%CVE-2023-52098HIGHDenial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.EPSS 0.4%CVE-2026-82756MEDIUMash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injectionEPSS 0.4%CVE-2023-28733HIGHStored XSS affecting the AcyMailing plugin for Joomla EPSS 0.4%CVE-2026-45570LOWgo-git: Improper single-quote escaping in go-git SSH transportEPSS 0.4%CVE-2026-55659HIGHGrist: XSS through unsafe value interpolation in server-rendered pagesEPSS 0.4%CVE-2024-39682MEDIUMWordPress Cooked Plugin - Authenticated (Contributor+) HTML Injection via Recipe ExcerptEPSS 0.4%CVE-2025-11713HIGHPotential user-assisted code execution in “Copy as cURL” commandEPSS 0.4%