Falhas do tipo CWE-75

36 resultados

Falha ao sanitizar elementos especiais para um plano diferente (injeção de elementos especiais)

Ocorre quando a aplicação não neutraliza caracteres ou comandos especiais ao passar dados de um contexto para outro (como de SQL para HTML, ou de entrada do usuário para linha de comando). O atacante consegue fazer a aplicação executar código ou comandos não autorizados inserindo caracteres que têm significado especial no contexto de destino.

Exemplo

Um formulário web que recebe um nome do usuário e o insere diretamente em uma consulta SQL sem escape adequado. Se o usuário digita `'; DROP TABLE users; --`, a query executada se torna maliciosa e deleta a tabela. Ou um aplicativo que passa entrada do usuário para um comando bash sem quotes, permitindo injeção de pipes ou redirecionadores.

Como mitigar

Use prepared statements / parameterized queries para SQL; escape caracteres especiais de acordo com o contexto de destino (HTML entities, shell escaping, etc.); implemente validação e whitelist de entrada; mantenha entrada e lógica separadas. A chave é tratar cada contexto de saída com seu próprio mecanismo de neutralização.

CVE-2021-22911—A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injectioEPSS 95.2%CVE-2024-0801HIGHUnauthenticated DoS in Arcserve Unified Data ProtectionEPSS 41.8%CVE-2021-39174HIGHConfiguration leakEPSS 3.9%CVE-2023-40743CRITICALApache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getServiceEPSS 2.6%CVE-2026-29042HIGHNuclio Shell Runtime Command Injection Leading to Privilege EscalationEPSS 2.3%CVE-2021-22910—A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which couldEPSS 2.3%CVE-2024-27622HIGHA remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vEPSS 2.0%CVE-2023-27533CRITICALA vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliEPSS 2.0%CVE-2022-24039—A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). TEPSS 1.9%CVE-2024-0044HIGHIn createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could leEPSS 1.5%CVE-2016-9471—Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on aEPSS 1.4%CVE-2024-39227CRITICALGL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16,EPSS 1.2%CVE-2024-35373CRITICALMocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.EPSS 1.2%CVE-2024-37779HIGHWoodWing Elvis DAM v6.98.1 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the Apache Ant scriptEPSS 1.1%CVE-2024-21503MEDIUMVersions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_eEPSS 1.0%CVE-2024-31809HIGHTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in thEPSS 1.0%CVE-2023-23912HIGHA vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with tEPSS 0.9%CVE-2022-48217HIGHThe tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in tEPSS 0.7%CVE-2025-50213CRITICALApache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperatorEPSS 0.6%CVE-2023-1758HIGHFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaqEPSS 0.5%