Skip to content
OpenAdvisories

Weakness (CWE)

CWE-75: Failure to Sanitize Special Elements into a Different Plane

Class Draft Mapping discouraged

The product does not adequately filter user-controlled input for special elements with control implications.

How to prevent it (2 mitigations)

  1. Requirements

    Programming languages and supporting technologies might be chosen which are not subject to these issues.

  2. Implementation

    Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.

Source: MITRE CWE-75

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-31908 Public exploit

    Apache APISIX: forward auth plugin allows header injection

    Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Apache APISIX: from 2.12.0 through 3.15.0. Users are recommended to upgrade to ver…

    Apache Software Foundation Apache APISIX
  • High 7.8
    CVE-2024-0044 Public exploit

    In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input vali…

    Google Android Android
  • High 8.8
    CVE-2021-39174 Public exploit

    Configuration leak

    Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various pas…

    fiveai Cachet cachethq/cachet Packagist
  • Unscored —
    CVE-2021-22911 Public exploit EPSS 95%

    A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthent…