CWE-1389: Incorrect Parsing of Numbers with Different Radices
The product parses numeric input assuming base 10 (decimal) values, but it does not account for inputs that use a different base number (radix).
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- flowiseai flowise Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses 7.6 High
- dani-garcia vaultwarden Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass 5.8 Medium
- @fedify fedify, vocab-runtime +1 more Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges 8.6 High
- onesearch one search One Search 1.1.0.0 Denial of Service 6.9 Medium
- fortinet fortios, fortiproxy +1 more An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy... 3.1 Low
- google https://github.com/google/nftables, nftables +1 more Improper IPv4 and IPv6 byte order storage in github.com/google/nftables 6.3 Medium