CWE-116: Improper Encoding or Escaping of Output
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Also known as Output Sanitization, Output Validation, Output Encoding.
A kind of CWE-707 Improper Neutralization.
From the CWE List. © The MITRE Corporation.
Newest
- openidentityplatform openam OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST 2.0 Low
- urwid Urwid: handle_short_request() crashes on non-ASCII POST body (UnicodeEncodeError DoS) 5.3 Medium
- jupyterlab jupyterlab-desktop JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL 9.4 Critical
- zammad Zammad: Stored XSS in ticket article rendering in the new Vue-based interface 5.1 Medium
-
libcgi-pm-perlDebian,perl-CGIAzure Linux +1 more CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename No score -
libcgi-pm-perlDebian,perl-CGIAzure Linux +1 more CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values No score - koxudaxi fastapi-code-generator fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator 9.3 Critical
- koxudaxi fastapi-code-generator fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict 9.3 Critical
- koxudaxi fastapi-code-generator fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring 9.3 Critical
- enspirit elo Elo: Remote Code Execution in Elo Ruby backend via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels 9.8 Critical
- wso2 api manager, identity server, identity server as key manager +2 more Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks 4.3 Medium
- apache software foundation wicket Apache Wicket: JavaScriptUtils#escapeQuotes does not escape the backslash, so its output can leave its string literal 7.4 High
- christianhelle refitter Refitter: C# source injection through OpenAPI header parameter names 8.6 High
- christianhelle refitter Refitter: C# source injection through OpenAPI content-type map keys 8.6 High
- webtoffee export and import users and customers Export and Import Users and Customers <= 2.7.5 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via Biographical Info Field 8.8 High
- intlify vue-i18n Vue I18n: escapeParameter does not prevent XSS through srcdoc in translation messages 7.2 High
- intlify vue-i18n Vue I18n: `escapeParameter` does not escape named values when the same call also passes a list 2.1 Low
- ljharb qs qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection 6.3 Medium
- openpanel-dev openpanel OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts 5.3 Medium
- lxsmnsyc seroval Seroval: Script injection through RegExp sources in serialized output 4.7 Medium
- intranda goobi-viewer-core Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection 5.3 Medium
- stevereiner flexible-graphrag Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content 7.1 High
- hcl software compass Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing 8.6 High
- unknown happyforms HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_referer 5.4 Medium
- pypa virtualenv virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST 7.8 High
- pypa virtualenv virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote 7.8 High
- pypa virtualenv virtualenv bash activate runs commands from an environment name with a backslash before $ 7.8 High
- mozilla thunderbird Stanza injection in XMPP chat 9.1 Critical
- @apostrophecms form, login-hcaptcha, login-recaptcha +1 more +3 more ApostropheCMS: CAPTCHA response token not URL-encoded 5.3 Medium
- vitest-dev vitest, @vitest mocker +1 more Vitest: Code injection via unauthenticated manual mock registration 4.7 Medium
- fast-uri fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references 3.7 Low
- mljar mercury Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML 6.1 Medium
-
libtext-csv-xs-perlDebian,perl-Text-CSV_XSAzure Linux +1 more Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine 9.8 Critical -
libtext-csv-xs-perlDebian,perl-Text-CSV_XSAzure Linux +1 more Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print 9.8 Critical - arcadia technology, llc crafty controller Improper Encoding or Escaping of Output in Crafty Controller 9.6 Critical
- micropyramid bottlecrm BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template 5.1 Medium
- netbird NetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution 8.9 High
- linuxfoundation vitess Vitess vttablet /twopcz reflected XSS 9.8 Critical
- microsoft visual studio code Visual Studio Code Remote Code Execution Vulnerability 8.8 High
- unstructured-io unstructured unstructured: Stored XSS via unescaped HTML generation 6.1 Medium
- progress sharefile storage zones controller Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller 6.5 Medium
- contao Contao: Cross-site scripting in the comments bundle 9.3 Critical
- devolutions server, mariadb +1 more MariaDB: privilege escalation via incorrect view frm parsing 7.2 High
- freescout-help-desk freescout FreeScout: Stored HTML Injection in Administrator Alert Emails via Spoofed CF-Connecting-IP Header 6.1 Medium
- apache log4net Apache log4net: RemoteSyslogAppender silently deletes non-ASCII content 5.3 Medium
- handlebars-lang handlebars.js Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates 4.7 Medium
- @quasar app-vite, quasarframework quasar +1 more Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained 8.3 High
- quasarframework quasar Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead() 10.0 Critical
- openapi-generators openapi-python-client openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation 8.4 High
-
@vue/server-renderernpm,@rootio/vue__server-rendererRoot +1 more @vue/server-renderer: XSS via missing CR in attribute-name blacklist 7.2 High - Show olderLoading…