Fallos del tipo CWE-150

93 resultados

Neutralização inadequada de sequências de escape, meta ou controle

Ocorre quando a aplicação não remove ou valida corretamente sequências de escape, metacaracteres ou caracteres de controle em dados de entrada antes de usá-los em contextos sensíveis (como exibição em terminal, logs, ou processamento de comandos). Um atacante pode injetar sequências que alteram o comportamento esperado, burlar filtros ou executar ações não autorizadas.

Ejemplo

Um sistema de logs que recebe input do usuário sem sanitização: se o atacante injeta a sequência de escape ANSI '\x1b[31m' (vermelho), pode alterar cores do terminal; se injeta '\x08' (backspace), pode apagar caracteres anteriores do log, ocultando evidências de sua ação.

Cómo mitigar

Valide e remova sequências de controle perigosas na entrada (whitelist de caracteres permitidos é preferível); ao exibir dados em contextos sensíveis (terminal, logs, email), escapeie ou sanitize explicitamente usando funções seguras; aplique Content Security Policy e validação contextual conforme o destino dos dados.

CVE-2023-30844LOWMutagen list and monitor operations do not neutralize control characters in text controlled by remote endpointsEPSS 0.7%CVE-2024-32986CRITICALArbitrary code execution due to improper sanitization of web app properties in PWAsForFirefox EPSS 0.7%CVE-2024-9774MEDIUMPython-sql: python-sql unary operators does not escape non-expressionEPSS 0.7%CVE-2025-0975HIGHIBM MQ code executionEPSS 0.7%CVE-2023-40185MEDIUMShescape on Windows escaping may be bypassed in threaded contextEPSS 0.7%CVE-2026-82710LOWTerminal escape sequence injection in mix usage_rules.search_docs via package documentation metadataEPSS 0.7%CVE-2024-50349LOWGit does not sanitize URLs when asking for credentials interactivelyEPSS 0.7%CVE-2025-55193LOWActive Record logging vulnerable to ANSI escape injectionEPSS 0.6%CVE-2026-25996MEDIUMInspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output ModeEPSS 0.6%CVE-2026-21521HIGHWord Copilot Information Disclosure VulnerabilityEPSS 0.6%CVE-2026-62948CRITICALOpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UIEPSS 0.6%CVE-2026-11373CRITICALNet::Statsite::Client versions through 1.1.0 for Perl allow metric injectionsEPSS 0.6%CVE-2026-26149CRITICALMicrosoft Power Apps Desktop Client Spoofing VulnerabilityEPSS 0.6%CVE-2026-19591HIGHOpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe becEPSS 0.6%CVE-2026-82584LOWTerminal escape sequence injection in the mix igniter.install confirmation prompt via package metadataEPSS 0.5%CVE-2026-93421MEDIUMMesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting EndpointEPSS 0.5%CVE-2024-52005HIGHThe sideband payload is passed unfiltered to the terminal in gitEPSS 0.5%CVE-2026-49147HIGHApp::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modesEPSS 0.5%CVE-2025-47284CRITICALGardener vulnerable to metadata injection for a project secret that can lead to privilege escalationEPSS 0.5%CVE-2026-11362CRITICALDataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tagsEPSS 0.4%