Weakness (CWE)
CWE-790: Improper Filtering of Special Elements
The product receives data from an upstream component, but it does not filter or incorrectly filters special elements before sending it to a downstream component.
Source: MITRE CWE-790
5 results · Clear filters · Feed
-
Medium 5.8
Enterprise Protection Backslash URL Rewrite Bypass
Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes w…
-
Medium 4.4
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could …
-
Medium 4.9
Stored XSS in process management
Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in Process Management modules of OTRS and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the Process Management targeting other admins. Th…
-
Medium 4.9
Stored XSS in System Configuration
Improper Neutralization of Input done by an attacker with admin privileges ('Cross-site Scripting') in OTRS (System Configuration modules) and ((OTRS)) Community Edition allows Cross-Site Scripting (XSS) within the System Configuration targeting other admins…
-
Medium 5.7
Information exlosure in external interface
Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs …