CWE-116
Improper Encoding or Escaping of Output
Description
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-104 · CAPEC-73 · CAPEC-81 · CAPEC-85
CVEs mapped to this weakness (510)
page 25 of 26| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-23630 | Med | 0.00 | 5.4 | 0.00 | Jan 21, 2026 | Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code block rendering is vulnerable to stored Cross-Site Scripting (XSS). The frontend can render attacker-controlled Mermaid diagrams using mermaid.render(), then… | ||
| CVE-2025-68460 | Hig | 0.00 | 7.2 | 0.00 | Dec 18, 2025 | Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer. | ||
| CVE-2025-66548 | Low | 0.00 | 3.3 | 0.00 | Dec 5, 2025 | Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.12.7, 1.14.4, and 1.15.1, file extension can be spoofed by using RTLO characters, tricking users into download files with a… | ||
| CVE-2025-46340 | Hig | 0.00 | 7.2 | 0.00 | May 5, 2025 | Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, due to an oversight in the validation performed in `UrlPreviewService` and `MkUrlPreview`, it is possible for an attacker to inject arbitrary CSS into the… | ||
| CVE-2024-52006 | Hig | 0.00 | 7.5 | 0.01 | Jan 14, 2025 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers.… | ||
| CVE-2024-50349 | Med | 0.00 | 4.7 | 0.01 | Jan 14, 2025 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out… | ||
| CVE-2024-47531 | Med | 0.00 | 4.6 | 0.00 | Sep 30, 2024 | Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extension. With malicious content injected inside the file data and users unknowingly… | ||
| CVE-2024-45299 | Med | 0.00 | 6.5 | 0.01 | Sep 6, 2024 | alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting non correctly escaped… | ||
| CVE-2024-8297 | Med | 0.00 | 5.3 | 0.01 | Aug 29, 2024 | A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token_middleware.go. The manipulation of the argument Authorization leads to improper… | ||
| CVE-2024-27938 | Med | 0.00 | 5.3 | 0.01 | Mar 11, 2024 | Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by… | ||
| CVE-2023-38316 | Cri | 0.00 | 9.8 | 0.01 | Nov 17, 2023 | An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2… | ||
| CVE-2023-46301 | Cri | 0.00 | 9.8 | 0.01 | Oct 22, 2023 | iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload. | ||
| CVE-2023-46300 | Cri | 0.00 | 9.8 | 0.01 | Oct 22, 2023 | iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration. | ||
| CVE-2023-28101 | Med | 0.00 | 5.0 | 0.01 | Mar 16, 2023 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the… | ||
| CVE-2023-28487 | Med | 0.00 | 5.3 | 0.01 | Mar 16, 2023 | Sudo before 1.9.13 does not escape control characters in sudoreplay output. | ||
| CVE-2023-28486 | Med | 0.00 | 5.3 | 0.01 | Mar 16, 2023 | Sudo before 1.9.13 does not escape control characters in log messages. | ||
| CVE-2022-41322 | Hig | 0.00 | 7.8 | 0.00 | Sep 23, 2022 | In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup. | ||
| CVE-2022-35153 | Cri | 0.00 | 9.8 | 0.02 | Aug 18, 2022 | FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php. | ||
| CVE-2022-23079 | 0.00 | — | 0.01 | Jun 22, 2022 | In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim. | |||
| CVE-2022-0935 | Hig | 0.00 | 8.8 | 0.01 | Apr 7, 2022 | Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97. |
- risk 0.00cvss 5.4epss 0.00
Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code block rendering is vulnerable to stored Cross-Site Scripting (XSS). The frontend can render attacker-controlled Mermaid diagrams using mermaid.render(), then…
- risk 0.00cvss 7.2epss 0.00
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.
- risk 0.00cvss 3.3epss 0.00
Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.12.7, 1.14.4, and 1.15.1, file extension can be spoofed by using RTLO characters, tricking users into download files with a…
- risk 0.00cvss 7.2epss 0.00
Misskey is an open source, federated social media platform. Starting in version 12.0.0 and prior to version 2025.4.1, due to an oversight in the validation performed in `UrlPreviewService` and `MkUrlPreview`, it is possible for an attacker to inject arbitrary CSS into the…
- risk 0.00cvss 7.5epss 0.01
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers.…
- risk 0.00cvss 4.7epss 0.01
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out…
- risk 0.00cvss 4.6epss 0.00
Scout is a web-based visualizer for VCF-files. Due to the lack of sanitization in the filename, it is possible bypass intended file extension and make users download malicious files with any extension. With malicious content injected inside the file data and users unknowingly…
- risk 0.00cvss 6.5epss 0.01
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting non correctly escaped…
- risk 0.00cvss 5.3epss 0.01
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token_middleware.go. The manipulation of the argument Authorization leads to improper…
- risk 0.00cvss 5.3epss 0.01
Postal is an open source SMTP server. Postal versions less than 3.0.0 are vulnerable to SMTP Smuggling attacks which may allow incoming e-mails to be spoofed. This, in conjunction with a cooperative outgoing SMTP service, would allow for an incoming e-mail to be received by…
- risk 0.00cvss 9.8epss 0.01
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2…
- risk 0.00cvss 9.8epss 0.01
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to upload.
- risk 0.00cvss 9.8epss 0.01
iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences related to tmux integration.
- risk 0.00cvss 5.0epss 0.01
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the…
- risk 0.00cvss 5.3epss 0.01
Sudo before 1.9.13 does not escape control characters in sudoreplay output.
- risk 0.00cvss 5.3epss 0.01
Sudo before 1.9.13 does not escape control characters in log messages.
- risk 0.00cvss 7.8epss 0.00
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup.
- risk 0.00cvss 9.8epss 0.02
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.
- CVE-2022-23079Jun 22, 2022risk 0.00cvss —epss 0.01
In motor-admin versions 0.0.1 through 0.2.56 are vulnerable to host header injection in the password reset functionality where malicious actor can send fake password reset email to arbitrary victim.
- risk 0.00cvss 8.8epss 0.01
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.