Falhas do tipo CWE-116

371 resultados

Codificação ou escape inadequado de saída

Fraqueza em que dados de saída não são codificados ou escapados corretamente antes de serem apresentados ao usuário ou processados por outro sistema. Isso permite que caracteres especiais (como <, >, aspas, Unicode) sejam interpretados como código em vez de dados literais, facilitando injeção de scripts, SQL ou outros ataques dependendo do contexto.

Exemplo

Um site que exibe um comentário do usuário sem escape HTML: se alguém enviar '<script>alert("XSS")</script>', o navegador executa o script em vez de mostrar o texto como comentário. Ou um app que insere entrada do usuário direto em comando SQL sem escape, permitindo SQL injection.

Como mitigar

Escape ou codifique a saída conforme o contexto de destino: use funções nativas de escape HTML para web (ex: `htmlspecialchars()` em PHP), prepared statements com placeholders para SQL, e bibliotecas estabelecidas como OWASP Encoder. Nunca confie em input do usuário — trate toda saída como potencialmente perigosa.

CVE-2026-13684CRITICALAn improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9,EPSS 0.5%CVE-2026-47206LOWDragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializerEPSS 0.5%CVE-2023-39381— Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.EPSS 0.4%CVE-2023-39382— Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to resEPSS 0.4%CVE-2023-39390—Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerabilityEPSS 0.4%CVE-2023-39386—Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newEPSS 0.4%CVE-2024-35225CRITICALJupyter Server Proxy has a reflected XSS issue in host parameterEPSS 0.4%CVE-2026-54182HIGHbackpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)EPSS 0.4%CVE-2026-33301HIGHOpenEMR has arbitrary image file read via PDF generatorEPSS 0.4%CVE-2021-25262MEDIUMYandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.EPSS 0.4%CVE-2026-25940HIGHjsPDF's PDF Injection in AcroForm module allows Arbitrary JavaScript Execution (RadioButton.createOption and "AS" property)EPSS 0.4%CVE-2024-4177HIGHHost whitelist parser issue in GravityZone Console On-Premise (VA-11554)EPSS 0.4%CVE-2026-42810CRITICALApache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table namesEPSS 0.4%CVE-2023-32301LOWDiscourse's canonical url not being used for topic embeddingsEPSS 0.4%CVE-2025-64325HIGHEmby Server is Vulnerable to Remote Code Execution Through XSS in Admin DashboardEPSS 0.4%CVE-2024-7873CRITICALStored XSS in Veribilim Software's Veribase Order ManagementEPSS 0.4%CVE-2026-54133CRITICALjmespath.php has CompilerRuntime code injection via unescaped function namesEPSS 0.4%CVE-2025-61773HIGHpyLoad CNL and captcha handlers allow code Injection via unsanitized parametersEPSS 0.4%CVE-2025-23207MEDIUM\htmlData does not validate attribute names in KaTeXEPSS 0.4%CVE-2024-47528MEDIUMLibreNMS Contains a Stored XSS via File UploadEPSS 0.4%