cve.bz

CWE-1173: Improper Use of Validation Framework

Filter

The product does not use, or incorrectly uses, an input validation framework that is provided by the source language, framework, or an independent library.

What the weakness is: CWE-1173 at MITRE

Ask an AI about CWE-1173

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1173: Improper Use of Validation Framework and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1173.html and https://cve.bz/cve/cwe/1173?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. –CVE-2026-120642

    CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some path_info and script_name values, Accept results, and the name lists from url_param and cookie are re…

  2. 6.9CVE-2024-58360EPSS 0.4%

    stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can create unlimited accounts with unverified email addresses, increa…

  3. 9.4CVE-2026-33454EPSS 1.5%

    The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter strategy used by the component (MailHeaderFilterStrategy) only filters the 'out' direction via setOutFilterStartsWith, while it does not con…

  4. 5.3CVE-2026-33674EPSS 0.2%

    PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

  5. 6.6CVE-2025-48490EPSS 0.6%

    Laravel Rest Api is an API generator. Prior to version 2.13.0, a validation bypass vulnerability was discovered where multiple validations defined for the same attribute could be silently overridden. Due to how the framework merged validat…

  6. 9.8CVE-2025-3940EPSS 0.4%

    Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before…

  7. 5.3CVE-2023-30949EPSS 0.2%

    A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.

  8. 7.5CVE-2023-29091EPSS 0.8%

    An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficie…

  9. 8.8CVE-2022-1414EPSS 0.9%

    3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.

  10. 7.5CVE-2020-1640EPSS 1.4%

    An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an attacker to crash RPD thereby causing a Denial of Service (DoS) condition. This…