Falhas do tipo CWE-116

371 resultados

Codificação ou escape inadequado de saída

Fraqueza em que dados de saída não são codificados ou escapados corretamente antes de serem apresentados ao usuário ou processados por outro sistema. Isso permite que caracteres especiais (como <, >, aspas, Unicode) sejam interpretados como código em vez de dados literais, facilitando injeção de scripts, SQL ou outros ataques dependendo do contexto.

Exemplo

Um site que exibe um comentário do usuário sem escape HTML: se alguém enviar '<script>alert("XSS")</script>', o navegador executa o script em vez de mostrar o texto como comentário. Ou um app que insere entrada do usuário direto em comando SQL sem escape, permitindo SQL injection.

Como mitigar

Escape ou codifique a saída conforme o contexto de destino: use funções nativas de escape HTML para web (ex: `htmlspecialchars()` em PHP), prepared statements com placeholders para SQL, e bibliotecas estabelecidas como OWASP Encoder. Nunca confie em input do usuário — trate toda saída como potencialmente perigosa.

CVE-2024-47224MEDIUMA vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unEPSS 0.3%CVE-2023-28362MEDIUMThe redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in thEPSS 0.3%CVE-2025-6429MEDIUMIncorrect parsing of URLs could have allowed embedding of youtube.comEPSS 0.3%CVE-2024-47531MEDIUMScout contains insufficient output escaping of attachment namesEPSS 0.3%CVE-2026-55891NONEPrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URIEPSS 0.3%CVE-2025-27109HIGHLack of Escaping of HTML in JSX Fragments allows for Cross-site Scripting in solid-jsEPSS 0.3%CVE-2026-59895MEDIUMHono: Server-Side XSS via JSX Escaping Bypass in cx() UtilityEPSS 0.3%CVE-2026-47171HIGHQuest Bot: Reminder messages allow stored mass mentions through `@everyone` and `@here`EPSS 0.3%CVE-2026-45375CRITICALSiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code executionEPSS 0.3%CVE-2026-49091HIGHImproper Output Neutralization for Logs in Kibana Leading to Log InjectionEPSS 0.3%CVE-2025-42896MEDIUMServer-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence PlatformEPSS 0.3%CVE-2026-61398CRITICALApache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UIEPSS 0.3%CVE-2026-55855MEDIUMMariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsetsEPSS 0.3%CVE-2026-59727LOWAstro: Cross-site scripting via unescaped transition:* directive values on hydrated islandsEPSS 0.3%CVE-2026-54287MEDIUMHono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and LatticeEPSS 0.3%CVE-2026-28898MEDIUMswift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translaEPSS 0.3%CVE-2023-4393MEDIUMHTML and SMTP Injection in LiquidFilesEPSS 0.3%CVE-2026-69821HIGHActive Directory Certificate Services (AD CS) Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-26953MEDIUMPi-hole Web Interface has Stored HTML Injection via X-Forwarded-For Header in Active Sessions TableEPSS 0.3%CVE-2026-46637MEDIUMTwig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`EPSS 0.3%