Skip to content
OpenAdvisories

Weakness (CWE)

CWE-75: Failure to Sanitize Special Elements into a Different Plane

Class Draft Mapping discouraged

The product does not adequately filter user-controlled input for special elements with control implications.

How to prevent it (2 mitigations)

  1. Requirements

    Programming languages and supporting technologies might be chosen which are not subject to these issues.

  2. Implementation

    Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.

Source: MITRE CWE-75

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2024-0044 Public exploit

    In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input vali…

    Google Android Android
  • High 8.8
    CVE-2021-39174 Public exploit

    Configuration leak

    Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various pas…

    fiveai Cachet cachethq/cachet Packagist