Fallos del tipo CWE-84

20 resultados

Falha na sanitização de entrada codificada em URI para execução de script

A aplicação web aceita entrada do usuário contendo scripts maliciosos, mas codificados em URI (ex: %3Cscript%3E), e falha em decodificar e validar essa entrada antes de usá-la. O atacante consegue contornar filtros simples porque a validação não descodifica a entrada antes de verificá-la, permitindo injeção de XSS ou código malicioso.

Ejemplo

Um formulário de busca filtra '<script>' mas não detecta '%3Cscript%3E' (versão codificada em URI). O navegador decodifica automaticamente ao renderizar, executando o script. Ou um parâmetro de redirecionamento valida a URL contra uma blacklist, mas aceita '%6A%61%76%61%73%63%72%69%70%74%3A' (javascript: codificado).

Cómo mitigar

Descodifique toda entrada do usuário (URI, HTML, JavaScript entities) antes de validar contra regras de segurança. Use listas de permissão (whitelist) em vez de blacklist. Contextualize a saída: escape para HTML se renderizar em HTML, para URL se for URL, etc. Considere validação com regex após normalização completa da entrada.

CVE-2020-7011Elastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If theEPSS 1.0%CVE-2022-40181A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), DEPSS 0.8%CVE-2021-3824OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.EPSS 0.7%CVE-2025-58444HIGHMCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP ServerEPSS 0.6%CVE-2023-25571MEDIUMBackstage has XSS Vulnerability in Software CatalogEPSS 0.5%CVE-2023-30959MEDIUMStored XSS via javascript URI in Apollo Change Requests commentEPSS 0.3%CVE-2024-45045MEDIUMJavaScript Injection via url encoded values in links in Collabora Office AndroidEPSS 0.3%CVE-2025-30203MEDIUMTuleap allows XSS via the content of RSS feeds in the RSS widgetsEPSS 0.3%CVE-2026-54443MEDIUMDashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)EPSS 0.2%CVE-2025-25329MEDIUMAn issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user informatiEPSS 0.2%CVE-2025-25326MEDIUMAn issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user inEPSS 0.2%CVE-2025-25325MEDIUMAn issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive user information via EPSS 0.2%CVE-2025-25330MEDIUMAn issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link.EPSS 0.2%CVE-2025-25323MEDIUMAn issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user informatiEPSS 0.2%CVE-2025-25334MEDIUMAn issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted linEPSS 0.2%CVE-2025-25331MEDIUMAn issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link.EPSS 0.2%CVE-2025-25324MEDIUMAn issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a cEPSS 0.2%CVE-2024-52890MEDIUMIBM Engineering Lifecycle Optimization - Publishing cross-site scriptingEPSS 0.2%CVE-2026-67338MEDIUMJupyterLab before 4.5.9 Stored XSS via Extension ManagerEPSS 0.2%CVE-2024-42184LOWHCL BigFix Patch Download Plug-ins are affected by insecure support for file URI schemeEPSS 0.1%