CWE-156: Improper Neutralization of Whitespace
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as whitespace when they are sent to a downstream component, e.g., space or tab.
Also known as White space.
A kind of CWE-138 Improper Neutralization of Special Elements.
From the CWE List. © The MITRE Corporation.
Newest
- aquaplatform revive adserver, revive adserver +1 more HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of... 5.4 Medium
- openbao OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias 6.5 Medium
- openbao OpenBao TOTP Secrets Engine Enables Code Reuse 6.5 Medium
- hashicorp vault, vault enterprise +1 more Vault LDAP MFA Enforcement Bypass When Using Username As Alias 6.5 Medium
- hashicorp vault, vault enterprise +1 more Vault TOTP Secrets Engine Code Reuse 6.5 Medium