Fallos del tipo CWE-150

93 resultados

Neutralização inadequada de sequências de escape, meta ou controle

Ocorre quando a aplicação não remove ou valida corretamente sequências de escape, metacaracteres ou caracteres de controle em dados de entrada antes de usá-los em contextos sensíveis (como exibição em terminal, logs, ou processamento de comandos). Um atacante pode injetar sequências que alteram o comportamento esperado, burlar filtros ou executar ações não autorizadas.

Ejemplo

Um sistema de logs que recebe input do usuário sem sanitização: se o atacante injeta a sequência de escape ANSI '\x1b[31m' (vermelho), pode alterar cores do terminal; se injeta '\x08' (backspace), pode apagar caracteres anteriores do log, ocultando evidências de sua ação.

Cómo mitigar

Valide e remova sequências de controle perigosas na entrada (whitelist de caracteres permitidos é preferível); ao exibir dados em contextos sensíveis (terminal, logs, email), escapeie ou sanitize explicitamente usando funções seguras; aplique Content Security Policy e validação contextual conforme o destino dos dados.

CVE-2026-35651MEDIUMOpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval PromptEPSS 0.3%CVE-2026-46739MEDIUMNet::Statsd versions before 0.13 for Perl allow metric injectionsEPSS 0.3%CVE-2026-54162MEDIUMEmber: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUIEPSS 0.3%CVE-2026-8788HIGHNet::Statsd::Lite versions through 0.10.0 for Perl allowed metric injectionsEPSS 0.2%CVE-2025-1693LOWMongoDB Shell may be susceptible to control character Injection via shell outputEPSS 0.2%CVE-2026-6019LOWBaseCookie.js_output() does not neutralize embedded charactersEPSS 0.2%CVE-2026-72913HIGHKitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequencesEPSS 0.2%CVE-2026-45803LOWgh: GitHub Actions log output in `gh run view` allows terminal escape sequence injectionEPSS 0.2%CVE-2026-8722MEDIUMNet::Async::Statsd::Client versions through 0.005 for Perl allow metric injectionsEPSS 0.2%CVE-2024-43785LOWgitoxide-core does not neutralize special characters for terminalsEPSS 0.2%CVE-2025-62845MEDIUMQuRouterEPSS 0.2%CVE-2025-64494MEDIUMSoft Serve does not sanitize ANSI escape sequences in user inputEPSS 0.2%CVE-2026-55467LOWCUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)EPSS 0.2%CVE-2026-103431HIGHCollectl: collectl: colmux does not sanitize ansi/vt100 terminal escape sequences in data received from remote collectl instancesEPSS 0.2%CVE-2026-73506MEDIUMOh My Posh: Terminal escape sequence injection via unsanitized prompt segment dataEPSS 0.2%CVE-2024-58251LOWIn netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequeEPSS 0.2%CVE-2026-45038HIGHTabby: Dragging and Dropping a File into Tabby Can Lead to Code ExecutionEPSS 0.2%CVE-2026-73036MEDIUMBash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.tomlEPSS 0.2%CVE-2025-15311HIGHTanium addressed an unauthorized code execution vulnerability in Tanium Appliance.EPSS 0.2%CVE-2026-54057HIGHKitty vulnerable to command injection via unsanitized OSC 21 query replyEPSS 0.2%