Skip to content
OpenAdvisories

Weakness (CWE)

CWE-791: Incomplete Filtering of Special Elements

Base Incomplete

The product receives data from an upstream component, but it does not completely filter special elements before sending it to a downstream component.

Source: MITRE CWE-791

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-48208 Public exploit

    Denial-of-Service via SVG Rendering in Ticket

    An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when…

    OTRS OTRS ((OTRS)) Community Edition
  • Critical 9.8
    CVE-2026-47323 Public exploit EPSS 20%

    Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

    Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilt…

    Apache Software Foundation Apache Camel org.apache.camel:camel-cxf-rest Maven
  • Critical 9.4
    CVE-2025-0324 Public exploit

    The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain admin…

    Axis Communications AB AXIS OS
  • High 8.0
    CVE-2022-21668 Public exploit

    Pipenv's requirements.txt parsing allows malicious index url in comments

    pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requiremen…

    pypa pipenv pipenv pipenv Ubuntu PyPI