CWE-790 - Improper Filtering of Special Elements

Home/CWEs/CWE info/

CWE-790

Abstraction:
Class

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Filtering of Special Elements

Description: The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-138Improper Neutralization of Special Elements

Release Date:
2009-12-28

Latest Modification Date:
2023-06-29

Latest Security News

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

New botnet exploits vulnerabilities in NVRs, TP-Link routers

Too Much 'Trust,' Not Enough 'Verify'

FBI links North Korean hackers to $308 million crypto heist

Trump 2.0 Portends Big Shift in Cybersecurity Policies

DNSSEC Denial-of-Service Attacks Show Technology's Fragility

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Clop ransomware is now extorting 66 Cleo data-theft victims

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

MediumMissing Anti-clickjacking Header

CSP

InformationalRe-examine Cache-control Directives

LowCookie without SameSite Attribute

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

LowServer Leaks Version Information via "Server" HTTP Response Header Field

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Top CWE List

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-863 Incorrect Authorization

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-66 Improper Handling of File Names that Identify Virtual Resources

CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

CWE-201 Insertion of Sensitive Information Into Sent Data

MediumCWE-352 Cross-Site Request Forgery (CSRF)

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-790 - Improper Filtering of Special Elements

The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.