Skip to content
OpenAdvisories

Weakness (CWE)

CWE-791: Incomplete Filtering of Special Elements

Base Incomplete

The product receives data from an upstream component, but it does not completely filter special elements before sending it to a downstream component.

Source: MITRE CWE-791

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-48208 Public exploit

    Denial-of-Service via SVG Rendering in Ticket

    An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when…

    OTRS OTRS ((OTRS)) Community Edition