CWE-157: Failure to Sanitize Paired Delimiters
Filter
The product does not properly handle the characters that are used to mark the beginning and ending of a group of entities, such as parentheses, brackets, and braces.
What the weakness is: CWE-157 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-15 Command Delimiters Likelihood: High · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-157, as MITRE names them. Credits.
Ask an AI about CWE-157
Show the prompt
Explain CWE-157: Failure to Sanitize Paired Delimiters and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/157.html and https://cve.bz/cve/cwe/157?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 8.3CVE-2026-25063EPSS 0.8%
gradle-completion provides Bash and Zsh completion support for Gradle. A command injection vulnerability was found in gradle-completion up to and including 9.3.0 that allows arbitrary code execution when a user triggers Bash tab completion…
- 9.8CVE-2025-25286EPSS 1.0%
Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain c…