Fallos del tipo CWE-184

245 resultados

Lista incompleta de entradas bloqueadas

Ocorre quando o desenvolvedor cria uma lista de padrões ou caracteres proibidos, mas deixa de fora alguns que também deveriam estar ali. Atacantes exploram as entradas não bloqueadas para contornar a validação e injetar código malicioso ou dados malformados.

Ejemplo

Um formulário bloqueia caracteres como '<' e '>' para prevenir XSS, mas esquece de bloquear aspas duplas e eventos JavaScript embutidos. Um atacante injeta onclick="alert('pwned')" e a validação deixa passar.

Cómo mitigar

Use abordagem whitelist (aceitar só o que é válido) em vez de blacklist (bloquear o que é ruim). Se precisar de blacklist, revise frequentemente a lista e teste contra vetores conhecidos. Melhor ainda: sanitize a entrada conforme o contexto onde será usada (HTML, SQL, URL, etc).

CVE-2026-86199HIGHPocketMine-MP before 5.43.1 Denial of Service via unauthenticated loginEPSS 0.5%CVE-2016-7076MEDIUMsudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C libraEPSS 0.5%CVE-2026-53873CRITICALpicklescan - Arbitrary Code Execution via profile.run() Blocklist BypassEPSS 0.5%CVE-2024-23336MEDIUMIncomplete disallowed remote addresses list in MyBBEPSS 0.5%CVE-2026-1773HIGHIEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 6EPSS 0.5%CVE-2026-53836HIGHOpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command AliasesEPSS 0.5%CVE-2026-100253HIGHIn JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings EPSS 0.4%CVE-2026-48557HIGHSpatie Laravel Media Library < 11.23.0 File Upload Restriction Bypass via FileAdder.phpEPSS 0.4%CVE-2026-52776HIGHTrestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0EPSS 0.4%CVE-2026-77466HIGHLychee: Webshop payment bypass via unrestricted "Dummy" gateway selectionEPSS 0.4%CVE-2026-44462MEDIUMZed: Allowlist Bypass via Bash Variable Expansion Chain in Terminal Tool PermissionsEPSS 0.4%CVE-2026-32747MEDIUMSiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secretsEPSS 0.4%CVE-2026-54090HIGHFile Browser: Command Allowlist Bypass via Shell Metacharacter InjectionEPSS 0.4%CVE-2026-73484HIGHFlowise before 3.1.3 Sandbox Escape via Pandas MethodsEPSS 0.4%CVE-2026-73650HIGHSVGO: removeScripts plugin leaves some executable scripts intactEPSS 0.4%CVE-2026-44115HIGHOpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec AllowlistEPSS 0.4%CVE-2026-103687MEDIUMrhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklistEPSS 0.4%CVE-2021-31370MEDIUMJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is receivedEPSS 0.4%CVE-2024-54149HIGHWinter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletionEPSS 0.4%CVE-2026-43566CRITICALOpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake EventsEPSS 0.4%