Fallos del tipo CWE-150

81 resultados

Neutralização inadequada de sequências de escape, meta ou controle

Ocorre quando a aplicação não remove ou valida corretamente sequências de escape, metacaracteres ou caracteres de controle em dados de entrada antes de usá-los em contextos sensíveis (como exibição em terminal, logs, ou processamento de comandos). Um atacante pode injetar sequências que alteram o comportamento esperado, burlar filtros ou executar ações não autorizadas.

Ejemplo

Um sistema de logs que recebe input do usuário sem sanitização: se o atacante injeta a sequência de escape ANSI '\x1b[31m' (vermelho), pode alterar cores do terminal; se injeta '\x08' (backspace), pode apagar caracteres anteriores do log, ocultando evidências de sua ação.

Cómo mitigar

Valide e remova sequências de controle perigosas na entrada (whitelist de caracteres permitidos é preferível); ao exibir dados em contextos sensíveis (terminal, logs, email), escapeie ou sanitize explicitamente usando funções seguras; aplique Content Security Policy e validação contextual conforme o destino dos dados.

CVE-2025-1693LOWMongoDB Shell may be susceptible to control character Injection via shell outputEPSS 0.2%CVE-2026-73035MEDIUMnpm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape SequencesEPSS 0.2%CVE-2026-6019LOWBaseCookie.js_output() does not neutralize embedded charactersEPSS 0.2%CVE-2026-45803LOWgh: GitHub Actions log output in `gh run view` allows terminal escape sequence injectionEPSS 0.2%CVE-2026-8722MEDIUMNet::Async::Statsd::Client versions through 0.005 for Perl allow metric injectionsEPSS 0.2%CVE-2024-43785LOWgitoxide-core does not neutralize special characters for terminalsEPSS 0.2%CVE-2026-73506MEDIUMOh My Posh: Terminal escape sequence injection via unsanitized prompt segment dataEPSS 0.2%CVE-2025-62845MEDIUMQuRouterEPSS 0.2%CVE-2025-64494MEDIUMSoft Serve does not sanitize ANSI escape sequences in user inputEPSS 0.2%CVE-2026-45038HIGHTabby: Dragging and Dropping a File into Tabby Can Lead to Code ExecutionEPSS 0.2%CVE-2024-58251LOWIn netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequeEPSS 0.2%CVE-2026-54057HIGHKitty vulnerable to command injection via unsanitized OSC 21 query replyEPSS 0.2%CVE-2026-41526MEDIUMIn KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This EPSS 0.2%CVE-2026-40505MEDIUMMuPDF < 1.27 mutool ANSI Injection via MetadataEPSS 0.2%CVE-2025-15311HIGHTanium addressed an unauthorized code execution vulnerability in Tanium Appliance.EPSS 0.2%CVE-2026-90895HIGHMISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal InjectionEPSS 0.2%CVE-2026-73036MEDIUMBash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.tomlEPSS 0.1%CVE-2026-75483MEDIUMpowerlevel10k Control Character Injection via package.json VersionEPSS 0.1%CVE-2026-90773LOWprocs through 0.14.12 Terminal Escape Sequence Injection via CommandEPSS 0.1%CVE-2026-47090LOWClaude HUD 0.0.12 Terminal Injection via OSC 8 HyperlinksEPSS 0.1%