Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1173: Improper Use of Validation Framework

Base Draft

The product does not use, or incorrectly uses, an input validation framework that is provided by the source language, framework, or an independent library.

How to prevent it (1 mitigation)
  1. Implementation

    Properly use provided input validation frameworks.

Source: MITRE CWE-1173

3 results · Clear filters · Feed

  • High 8.0

    Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass

    Ech0 through 4.5.6 contains an OAuth redirect URI validation vulnerability in parseAndValidateClientRedirect (internal/service/auth/auth.go) that compares only the scheme and host of the client-supplied redirect_uri against the admin-configured allowlist, ign…

  • High 8.8

    3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user c…

  • High 7.5

    Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.

    An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an attacker to crash RPD thereby causing a Denial of Service (DoS) condition. This framework requires …