Weakness (CWE)
CWE-75: Failure to Sanitize Special Elements into a Different Plane
Class Draft Mapping discouraged
The product does not adequately filter user-controlled input for special elements with control implications.
How to prevent it (2 mitigations)
-
Requirements
Programming languages and supporting technologies might be chosen which are not subject to these issues.
-
Implementation
Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.
Source: MITRE CWE-75
1 result · Clear filters · Feed
-
Critical 9.1CVE-2026-31908 Public exploit
Apache APISIX: forward auth plugin allows header injection
Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0. Users are recommended to upgrade to ver…