CWE-237 - Improper Handling of Structural Elements

Home/CWEs/CWE info/

CWE-237

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Handling of Structural Elements

Description: The product does not handle or incorrectly handles inputs that are related to complex structures.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-228Improper Handling of Syntactically Invalid Structure

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Massive PSAUX ransomware attack targets 22,000 CyberPanel instances

Truist Bank confirms breach after stolen data shows up on hacking forum

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

Microsoft SharePoint RCE bug exploited to breach corporate network

CISA proposes new security requirements to protect govt, personal data

LiteSpeed Cache WordPress plugin bug lets hackers get admin access

DDoS site Dstat.cc seized and two suspects arrested in Germany

Google patches actively exploited Android vulnerability (CVE-2024-43093)

Common Alerts

HighAccess Control Issue - Improper Authentication

Medium.htaccess Information Leak

HighViewstate without MAC Signature (Unsure)

InformationalCharset Mismatch

LowPrivate IP Disclosure via WebSocket

HighCross-Domain Misconfiguration - Adobe - Read

InformationalSec-Fetch-Mode Header is Missing

MediumCSP: Wildcard Directive

HighPath Traversal

HighSQL Injection - MsSQL

Latest CVE List

CVE-2024-8957 PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CVE-2024-8956 PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability

CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

CVE-2024-9537 ScienceLogic SL1 Unspecified Vulnerability

CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability

CVE-2024-30088 Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability

Common CWEs

CWE-535 Exposure of Information Through Shell Error Message

LowCWE-197 Numeric Truncation Error

CWE-1086 Class with Excessive Number of Child Classes

CWE-1054 Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer

CWE-617 Reachable Assertion

CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information

CWE-533 DEPRECATED: Information Exposure Through Server Log Files

CWE-45 Path Equivalence: 'file...name' (Multiple Internal Dot)

CWE-356 Product UI does not Warn User of Unsafe Actions

CWE-187 Partial String Comparison

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-237 - Improper Handling of Structural Elements

The product does not handle or incorrectly handles inputs that are related to complex structures.