Skip to content
OpenAdvisories

Weakness (CWE)

CWE-75: Failure to Sanitize Special Elements into a Different Plane

Class Draft Mapping discouraged

The product does not adequately filter user-controlled input for special elements with control implications.

How to prevent it (2 mitigations)

  1. Requirements

    Programming languages and supporting technologies might be chosen which are not subject to these issues.

  2. Implementation

    Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.

Source: MITRE CWE-75

All Critical High Medium Low Exploited only Public exploit

41 results · Feed

  • Unscored —
    CVE-2016-9471

    Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised whe…