Weaknesses of type CWE-436

159 results

Conflito de Interpretação

Fraqueza em que diferentes componentes de um sistema interpretam a mesma entrada ou dado de forma diferente, causando inconsistência lógica. Um atacante explora essa divergência para contornar validações em um componente enquanto consegue efeito diferente em outro, comprometendo a segurança geral.

Example

Um firewall valida uma URL como segura interpretando-a de uma forma, mas o navegador a interpreta diferentemente e acessa um endpoint malicioso. Ou um validador servidor rejeita um caminho com '..' enquanto outro componente o normaliza de forma distinta, permitindo path traversal.

How to mitigate

Padronize a interpretação: use bibliotecas de parsing e normalização comuns entre todos os componentes, valide em múltiplas camadas com a mesma lógica, e teste casos de borda onde diferentes interpretadores possam divergir (encoding, caracteres especiais, formatos ambíguos).

CVE-2024-34478HIGHbtcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failuEPSS 0.6%CVE-2026-81378HIGHVisual Studio Code Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2023-40718MEDIUMA interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packeEPSS 0.5%CVE-2026-67201HIGHV 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.httpEPSS 0.5%CVE-2026-49332HIGHOpenshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreamsEPSS 0.5%CVE-2026-85184CRITICAL@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request targetEPSS 0.5%CVE-2026-8034HIGHServer-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusionEPSS 0.5%CVE-2026-14198CRITICAL@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter valuesEPSS 0.5%CVE-2023-22735MEDIUMUser uploads proxied from S3 lack `Content-Security-Policy` headers, may be served with `Content-Disposition: inline` in zulipEPSS 0.5%CVE-2026-6322HIGHfast-uri vulnerable to host confusion via percent-encoded authority delimitersEPSS 0.5%CVE-2026-109428HIGHMistral Vibe < 2.25.5 Permission Bypass via Bash Line ContinuationEPSS 0.5%CVE-2025-24013MEDIUMCodeIgniter validation of header name and valueEPSS 0.5%CVE-2026-73553HIGHEnvoy: RBAC Authorization Bypass via Path ParametersEPSS 0.5%CVE-2026-110204HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Funsub Command SubstitutionEPSS 0.5%CVE-2026-110206HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Command Substitution at Command PositionEPSS 0.5%CVE-2026-110203HIGHRoo-Code through 3.54.0 Auto-Approve Bypass via Quote Masking DesynchronizationEPSS 0.5%CVE-2026-40165HIGHauthentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier TruncationEPSS 0.5%CVE-2026-6270CRITICAL@fastify/middie vulnerable to middleware authentication bypass in child plugin scopesEPSS 0.5%CVE-2026-100351HIGHkin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusionEPSS 0.5%CVE-2026-33808CRITICAL@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)EPSS 0.5%