CWE-237 - Improper Handling of Structural Elements

Home/CWEs/CWE info/

CWE-237

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Handling of Structural Elements

Description: The product does not handle or incorrectly handles inputs that are related to complex structures.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-228Improper Handling of Syntactically Invalid Structure

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Recorded Future CEO applauds "undesirable" designation by Russia

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Microsoft fixes exploited zero-day (CVE-2024-49138)

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

MediumMissing Anti-clickjacking Header

CSP

InformationalRe-examine Cache-control Directives

LowCookie without SameSite Attribute

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

LowServer Leaks Version Information via "Server" HTTP Response Header Field

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43491 Microsoft Windows Update Use-After-Free Vulnerability

Common CWEs

CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

CWE-1086 Class with Excessive Number of Child Classes

HighCWE-787 Out-of-bounds Write

HighCWE-61 UNIX Symbolic Link (Symlink) Following

CWE-42 Path Equivalence: 'filename.' (Trailing Dot)

CWE-1328 Security Version Number Mutable to Older Versions

CWE-1173 Improper Use of Validation Framework

HighCWE-652 Improper Neutralization of Data within XQuery Expressions ('XQuery Injection')

CWE-45 Path Equivalence: 'file...name' (Multiple Internal Dot)

CWE-143 Improper Neutralization of Record Delimiters

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-237 - Improper Handling of Structural Elements

The product does not handle or incorrectly handles inputs that are related to complex structures.