Falhas do tipo CWE-116

427 resultados

Codificação ou escape inadequado de saída

Fraqueza em que dados de saída não são codificados ou escapados corretamente antes de serem apresentados ao usuário ou processados por outro sistema. Isso permite que caracteres especiais (como <, >, aspas, Unicode) sejam interpretados como código em vez de dados literais, facilitando injeção de scripts, SQL ou outros ataques dependendo do contexto.

Exemplo

Um site que exibe um comentário do usuário sem escape HTML: se alguém enviar '<script>alert("XSS")</script>', o navegador executa o script em vez de mostrar o texto como comentário. Ou um app que insere entrada do usuário direto em comando SQL sem escape, permitindo SQL injection.

Como mitigar

Escape ou codifique a saída conforme o contexto de destino: use funções nativas de escape HTML para web (ex: `htmlspecialchars()` em PHP), prepared statements com placeholders para SQL, e bibliotecas estabelecidas como OWASP Encoder. Nunca confie em input do usuário — trate toda saída como potencialmente perigosa.

CVE-2025-42896MEDIUMServer-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence PlatformEPSS 0.3%CVE-2026-49091HIGHImproper Output Neutralization for Logs in Kibana Leading to Log InjectionEPSS 0.3%CVE-2026-45375CRITICALSiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code executionEPSS 0.3%CVE-2026-64647MEDIUMNext.js: Response Body Cache Confusion with Invalid UTF-8 Request BodiesEPSS 0.3%CVE-2026-63469CRITICALfastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dictEPSS 0.3%CVE-2026-63471CRITICALfastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decoratorEPSS 0.3%CVE-2026-28898MEDIUMswift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translaEPSS 0.3%CVE-2026-54287MEDIUMHono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and LatticeEPSS 0.3%CVE-2026-35208MEDIUMlichess.org has an Unsanitized Stream Title Injection on /streamerEPSS 0.3%CVE-2026-63329MEDIUMWarpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend TargetsEPSS 0.3%CVE-2026-57210HIGHHeimdall: IP Spoofing via Unvalidated Forwarding HeadersEPSS 0.3%CVE-2026-63208MEDIUMZammad: Microsoft Graph error logs expose partially masked OAuth access tokensEPSS 0.3%CVE-2026-46637MEDIUMTwig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`EPSS 0.3%CVE-2025-5271MEDIUMDevtools' preview ignored CSP headersEPSS 0.3%CVE-2026-28907HIGHThe issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOEPSS 0.3%CVE-2026-110725LOWfast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesEPSS 0.3%CVE-2026-95274HIGHImproper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer procEPSS 0.3%CVE-2026-54013HIGHOpen WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUIEPSS 0.3%CVE-2025-47280LOWUmbraco.Forms has HTML injection vulnerability in 'Send email' workflowEPSS 0.3%CVE-2026-24127MEDIUMTypemill has Reflected XSS via login error view templateEPSS 0.3%