Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1173: Improper Use of Validation Framework

Base Draft

The product does not use, or incorrectly uses, an input validation framework that is provided by the source language, framework, or an independent library.

How to prevent it (1 mitigation)

  1. Implementation

    Properly use provided input validation frameworks.

Source: MITRE CWE-1173

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-120642

    CGI versions before 5.00 for Perl return request-derived values untainted under taint mode

    CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some path_info and script_name values, Accept results, and the name lists from url_param and cookie are returned without the ta…

    libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux
  • Critical 9.4
    CVE-2026-33454 Public exploit

    Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant)

    The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter strategy used by the component (MailHeaderFilterStrategy) only filters the 'out' direction via setOutFilterStartsWith, while it does not configure the 'in' dire…

    Apache Software Foundation Apache Camel org.apache.camel:camel-mail Maven