Fallos del tipo CWE-75

36 resultados

Injeção de Elementos Especiais por Falta de Sanitização entre Planos

Ocorre quando a aplicação não sanitiza adequadamente dados de entrada antes de usá-los em um contexto diferente (por exemplo, dados de usuário inseridos em HTML, SQL ou JavaScript). O atacante injeta caracteres ou comandos especiais que são interpretados no novo contexto, alterando a lógica esperada e comprometendo segurança ou integridade.

Ejemplo

Um formulário web recebe nome do usuário e o insere diretamente em um comentário HTML sem escapar. Alguém preenche o nome com '<script>alert(1)</script>', que é então armazenado e executado no navegador de outros usuários (XSS). Ou um campo de busca injeta caracteres SQL como ' OR '1'='1 em uma query, bypassando filtros.

Cómo mitigar

Sanitize e escape dados conforme o contexto de destino: use funções nativas de encoding (htmlspecialchars em PHP, parameterized queries em SQL, template auto-escape em frameworks). Valide entrada contra um whitelist de caracteres permitidos e aplique o princípio de menor privilégio nos acessos de banco e sistema.

CVE-2024-27708CRITICALIframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary EPSS 0.5%CVE-2026-31908CRITICALApache APISIX: forward auth plugin allows header injectionEPSS 0.5%CVE-2024-39243CRITICALAn issue discovered in skycaiji 2.8 allows attackers to run arbitrary code via crafted POST request to /index.php?s=/admin/develop/editor_saEPSS 0.5%CVE-2022-4721MEDIUMFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffwebEPSS 0.5%CVE-2024-23268HIGHAn injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS VentEPSS 0.4%CVE-2022-3607MEDIUMFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprintEPSS 0.4%CVE-2024-23274HIGHAn injection issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS VentEPSS 0.4%CVE-2024-31806MEDIUMTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem function which cEPSS 0.4%CVE-2024-24257HIGHAn issue in skteco.com Central Control Attendance Machine web management platform v.3.0 allows an attacker to obtain sensitive information vEPSS 0.4%CVE-2024-9940MEDIUMCalculated Fields Form <= 5.2.45 - HTML InjectionEPSS 0.4%CVE-2024-58362HIGHSurrealDB before 1.5.5 Query Injection via RPC APIEPSS 0.4%CVE-2023-0302HIGHFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2EPSS 0.4%CVE-2024-31812MEDIUMIn TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtEPSS 0.3%CVE-2025-61911MEDIUMpython-ldap has sanitization bypass in ldap.filter.escape_filter_charsEPSS 0.3%CVE-2026-54771HIGHLangroid: handle_message() executes user-supplied tool JSON without sender verificationEPSS 0.3%CVE-2026-27120MEDIUMLeaf-kit html escaping does not work on characters that are part of extended grapheme clusterEPSS 0.2%