Weaknesses of type CWE-791

42 results

Filtragem Incompleta de Elementos Especiais

Ocorre quando a aplicação tenta filtrar ou remover caracteres/elementos perigosos, mas deixa brechas na lógica de validação. Um atacante contorna o filtro usando variações não previstas (encoding alternativo, aninhamento, caracteres ignorados) para injetar código malicioso. O perigo está na falsa sensação de segurança: o desenvolvedor acredita estar protegido, mas não está.

Example

Um formulário bloqueia a tag `<script>`, mas aceita `<ScRiPt>` (caso diferente), `<SCRIPT >` (espaço), ou `<svg onload=...>` (tag alternativa). O filtro é incompleto e o XSS passa direto.

How to mitigate

Use whitelist de elementos permitidos em vez de blacklist; aplique função de sanitização robusta (como DOMPurify em JS ou bibliotecas equivalentes); valide e normalize a entrada antes de filtrar; e teste com variações deliberadas (encoding, case variations, aninhamento) para garantir que o filtro funciona em todos os casos.

CVE-2025-0324CRITICALThe VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.EPSS 0.4%CVE-2025-6518MEDIUMPySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template engineEPSS 0.4%CVE-2026-44232HIGHdssrf: every IPv6 category bypasses is_url_safeEPSS 0.3%CVE-2023-31172MEDIUMIncomplete Filtering of Special ElementsEPSS 0.3%CVE-2020-36827MEDIUMThe XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.EPSS 0.3%CVE-2026-48208MEDIUMDenial-of-Service via SVG Rendering in TicketEPSS 0.3%CVE-2026-5559MEDIUMAntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engineEPSS 0.3%CVE-2025-2336MEDIUMAngularJS improper sanitization in SVG '<image>' element with 'ngSanitize'EPSS 0.3%CVE-2026-75979MEDIUMxianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engineEPSS 0.3%CVE-2025-9094MEDIUMThingsBoard Add Gateway special elements used in a template engineEPSS 0.3%CVE-2026-6984MEDIUMAstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engineEPSS 0.3%CVE-2026-9498MEDIUMDromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engineEPSS 0.3%CVE-2026-19929MEDIUMOpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engineEPSS 0.3%CVE-2025-59303MEDIUMHAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with EPSS 0.3%CVE-2026-3714MEDIUMOpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engineEPSS 0.3%CVE-2023-1076MEDIUMA flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initializatiEPSS 0.3%CVE-2026-78140MEDIUMDromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engineEPSS 0.2%CVE-2026-5987MEDIUMSanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engineEPSS 0.2%CVE-2026-8740MEDIUMSanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engineEPSS 0.2%CVE-2026-18632MEDIUMlanggenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engineEPSS 0.2%