Skip to content
OpenAdvisories

Weakness (CWE)

CWE-792: Incomplete Filtering of One or More Instances of Special Elements

Variant Incomplete

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

Source: MITRE CWE-792

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-12758 Public exploit

    Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) appearing in a sequen…

    validator npm
  • High 7.7
    CVE-2025-47779

    Using malformed From header can forge identity with ";" or NULL in name portion

    Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authentication do not get p…

    asterisk asterisk asterisk asterisk Debian Ubuntu