CWE-149: Improper Neutralization of Quoting Syntax
Quotes injected into a product can be used to compromise a system. As data are parsed, an injected/absent/duplicate/malformed use of quotes may cause the process to take unexpected actions.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- aws aws-sdk-pandas Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas 5.0 Medium
- freebsd Remote code execution via malicious DHCP options 8.1 High
- anviz biometric technology co., ltd. aim crosschex standard Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User Import 9.3 Critical
- f5 f5os-a, f5os-c, f5os - appliance +1 more +3 more F5OS-A/C CLI vulnerability 8.3 High
-
libpqAlmaLinux,postgresqlAlmaLinux,libecpg6TuxCare +103 more +105 more PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation 8.1 High - eclipse jetty, debian linux, eclipse jetty.project +2 more Jetty vulnerable to errant command quoting in CGI Servlet 3.5 Low