CWE-1289: Improper Validation of Unsafe Equivalence in Input
The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.
A kind of CWE-20 Improper Input Validation.
From the CWE List. © The MITRE Corporation.
Newest
- angularjs, angularjs angular.js, netapp active iq unified manager +2 moreAngularJS improper sanitization in 'srcset' attribute4.8 Medium
- cure53 dompurifyDOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode6.8 Medium
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical