CWE-153: Improper Neutralization of Substitution Characters
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as substitution characters when they are sent to a downstream component.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- gitlab Improper Neutralization of Substitution Characters in GitLab 2.6 Low
- dataease Dataease PostgreSQL & Redshift Data Source JDBC Connection Parameters Bypass Vulnerability 8.9 High
- dataease Dataease PostgreSQL Data Source JDBC Connection Parameters Bypass Vulnerability 8.9 High
- dataease Dataease Redshift Data Source JDBC Connection Parameters Bypass Vulnerability 8.9 High
- dataease Dataease H2 JDBC Connection Remote Code Execution 8.9 High