CWE-173: Improper Handling of Alternate Encoding
The product does not properly handle when an input uses an alternate encoding that is valid for the control sphere to which the input is being sent.
A kind of CWE-172 Improper Encoding or Decoding of Data.
From the CWE List. © The MITRE Corporation.
Newest
- tryghost ghost Ghost before 6.20.0 File Read via URL Encoding Bypass 6.9 Medium
- ash-project ash double entry Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entry 2.1 Low
- red hat build of apache camel 3.33.3.sp2, build of apache camel 4 for quarkus 3, build of debezium 3 +12 more +14 more Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding 7.4 High
- eclipse jetty, eclipse foundation jetty - ee8, jetty - ee9 +2 more Digest authentication lossy encoding 8.7 High
- jetbrains youtrack In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of... 3.5 Low
- executable books markdown-it-py markdown-it-py crash on null assertions 3.3 Low
- executable books markdown-it-py markdown-it-py CLI crash on invalid UTF-8 characters 3.3 Low
- node-fetch node-fetch/node-fetch, node-fetch project node-fetch, debian linux +1 more +3 more Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch 8.8 High
- google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 more Temp directory permission issue in Guava 3.3 Low
- python, canonical ubuntu linux, debian linux +16 more +18 more Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode... 9.8 Critical