CWE-1173: Improper Use of Validation Framework

The product does not use, or incorrectly uses, an input validation framework that is provided by the source language, framework, or an independent library.

A kind of CWE-20 Improper Input Validation.

From the CWE List. © The MITRE Corporation.

Newest

• libcgi-pm-perl Debian, perl-CGI Azure Linux +1 more CGI versions before 5.00 for Perl return request-derived values untainted under taint mode CVE-2026-120642 No scoreNovember 3, 2026
• stoatchat stoatchat before 0.7.8 Unrestricted Account Creation CVE-2024-58360 6.9 MediumJuly 16, 2026
• lin-snow ech0 Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass CVE-2026-79662 Fix available 8.8 HighMay 7, 2026
• apache camel, red hat build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +8 more +10 more Apache Camel: Inbound Header Filter Missing in MailHeaderFilterStrategy Allows Remote Code Execution via MIME Header Injection (CVE-2025-30177 Variant) CVE-2026-33454 Public exploitFix available 9.4 CriticalApril 27, 2026
• prestashop PrestaShop: Improper Use of Validation Framework CVE-2026-33674 Fix available 2.0 LowMarch 25, 2026
• lomkit laravel-rest-api Laravel Rest Api has a Search Validation Bypass CVE-2025-48490 Fix available 6.6 MediumMay 27, 2025
• tridium niagara, niagara enterprise security, niagara framework +2 more Improper Use of Validation Framework CVE-2025-3940 5.3 MediumMay 22, 2025
• palantir slate, com.palantir.slate:slate +1 more CVE-2023-30949 CVE-2023-30949 4.3 MediumJuly 26, 2023
• samsung exynos 1080 firmware, exynos 5123 firmware, exynos 5300 firmware +3 more +5 more An issue was discovered in Exynos Mobile Processor, Automotive Processor and Modem for Exynos... CVE-2023-29091 Fix available 6.8 MediumApril 1, 2023
• redhat 3scale api management 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields.... CVE-2022-1414 8.8 HighOctober 19, 2022
• apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... CVE-2021-1871 In KEVFix available 9.8 CriticalApril 2, 2021
• apple ipados, macos, ios and ipados +5 more +7 more A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2... CVE-2021-1870 In KEVFix available 9.8 CriticalMarch 24, 2021
• juniper junos, juniper networks junos os +1 more Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash. CVE-2020-1640 7.5 HighJuly 17, 2020