Weakness (CWE)
CWE-791: Incomplete Filtering of Special Elements
Base Incomplete
The product receives data from an upstream component, but it does not completely filter special elements before sending it to a downstream component.
Source: MITRE CWE-791
2 results · Clear filters · Feed
-
Critical 9.8
Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering
Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilt…
-
Critical 9.4CVE-2025-0324 Public exploit
The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain admin…