Weaknesses of type CWE-184

202 results

Lista incompleta de entradas bloqueadas

Ocorre quando um aplicativo tenta bloquear entradas maliciosas usando uma lista de padrões ou valores proibidos, mas a lista é incompleta ou pode ser contornada. Um atacante descobre variações não contempladas (encoding diferente, casos alternativos, caracteres especiais) e consegue passar por uma validação que se supõe segura.

Example

Um formulário bloqueia SQL injection filtrando a palavra 'DROP', mas não 'dr0p', não '/*DROP*/' ou variações com espaços. Um atacante usa uma dessas formas para executar comandos SQL maliciosos que a lista de bloqueio não previu.

How to mitigate

Em vez de listar o que é proibido (blocklist), defina explicitamente o que é permitido (allowlist/whitelist) com validação rígida de formato. Use bibliotecas consolidadas de sanitização e escape específicas para cada contexto (SQL, HTML, JavaScript) — nunca confie em listas de palavras-chave.

CVE-2026-44287MEDIUMFastGPT: sandbox escape to RCE - code-sandbox regex /\bimport\s*\(/ is bypassableEPSS 0.4%CVE-2026-53864HIGHOpenClaw < 2026.5.26 - Insufficient Environment Variable Sanitization in Node.js Control VariablesEPSS 0.4%CVE-2021-31370MEDIUMJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is receivedEPSS 0.4%CVE-2026-1773HIGHIEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 6EPSS 0.4%CVE-2024-54149HIGHWinter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletionEPSS 0.4%CVE-2026-26067MEDIUMOctober: Safe Mode Bypass via CSS Preprocessor CompilersEPSS 0.4%CVE-2022-34888LOWThe Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normaEPSS 0.4%CVE-2026-75884CRITICALAwx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groupsEPSS 0.4%CVE-2026-90808MEDIUMHKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklistEPSS 0.4%CVE-2024-28246MEDIUMKaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocolsEPSS 0.4%CVE-2026-50251MEDIUMAttacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flushEPSS 0.4%CVE-2026-62676HIGHOmnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.pyEPSS 0.4%CVE-2026-55830HIGHRestrictedPython guard hooks can be shadowed via positional-only argumentsEPSS 0.4%CVE-2026-22608HIGHFickling vulnerable to use of ctypes and pydoc gadget chain to bypass detectionEPSS 0.4%CVE-2026-34425MEDIUMOpenClaw - Shell-Bleed Protection Preflight Validation BypassEPSS 0.4%CVE-2026-31952HIGHXibo CMS API has SQL Injection via DataSet Filter ParameterEPSS 0.4%CVE-2026-73491LOWLoofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character referencesEPSS 0.4%CVE-2026-73492LOWLoofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolonsEPSS 0.4%CVE-2026-47389HIGHMastodon: SSRF protection bypass on older Ruby versionsEPSS 0.4%CVE-2026-26274MEDIUMOctober: Safe Mode Bypass via Twig Database Write OperationsEPSS 0.4%