Weaknesses of type CWE-692

10 results

Lista negra incompleta contra XSS

A aplicação tenta bloquear ataques XSS usando uma lista de padrões ou palavras-chave proibidas (como '<script>', 'onerror=', etc.), mas a lista é incompleta ou contorna-se facilmente. Um atacante usa variações não previstas (caso misto, codificação, espaços, comentários HTML) para injetar código malicioso que passa pelo filtro.

Example

Um fórum bloqueia '<script>' mas permite '<ScRiPt>' ou '<svg onload=...>'. Ou filtra 'javascript:' mas não 'java\nscript:' com quebra de linha. O código malicioso passa e executa no navegador da vítima.

How to mitigate

Abandone listas negras: use whitelist (lista branca) de tags/atributos seguros ou escape/sanitize tudo com biblioteca confiável (DOMPurify, htmlspecialchars, frameworks modernos). Valide e contextualize: diferentes contextos (HTML, atributo, JavaScript, URL) exigem escapes diferentes.

CVE-2023-26047MEDIUMteler-waf contains detection rule bypass via entities payloadEPSS 0.5%CVE-2024-30924MEDIUMCross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.EPSS 0.3%CVE-2025-53904LOWThe Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-49590LOWCryptPad Dom-Based Cross-Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-20240MEDIUMA vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflEPSS 0.3%CVE-2026-71478MEDIUMleague/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytesEPSS 0.2%CVE-2024-42214MEDIUMHCL Aftermarket EPC is vulnerable to attack since HTTP OPTIONS method is enabled on this web server. The OPTIONS method provides a list of tEPSS 0.2%CVE-2026-15295MEDIUMAjax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2024-52305MEDIUMUnoPim Stored XSS : Cookie hijacking through Create User functionEPSS 0.2%CVE-2024-23569MEDIUMHCL Aftermarket EPC is vulnerable to attack since the server is not configured with “X-XSS-Protection" headerEPSS 0.2%