qDecoder before 12.1.0 does not ensure that the percent character is followed by two hex digits for URL decoding.

Published Jun 3, 2022 · Updated Aug 3, 2024 · Assigned by mitre