Skip to content
OpenAdvisories

Weakness (CWE)

CWE-790: Improper Filtering of Special Elements

Class Incomplete

The product receives data from an upstream component, but it does not filter or incorrectly filters special elements before sending it to a downstream component.

Source: MITRE CWE-790

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-22578

    Sequalize - Default support for “raw attributes” when using parentheses

    Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

    Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm
  • Critical 9.9
    CVE-2021-43802

    Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports

    Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, might allow the attacker to gain admin privileges for the Etherpad instance. This, in turn, can be used to install a mal…

    ether etherpad-lite