cve.bz

CWE-20: Improper Input Validation, page 140

Filter

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

What the weakness is: CWE-20 at MITRE. OWASP Top 10: A05:2025 Injection

Related attack patterns (CAPEC): 51
  • CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters Likelihood: Medium · Severity: Medium
  • CAPEC-7 Blind SQL Injection Likelihood: High · Severity: High
  • CAPEC-8 Buffer Overflow in an API Call Likelihood: High · Severity: High
  • CAPEC-9 Buffer Overflow in Local Command-Line Utilities Likelihood: High · Severity: High
  • CAPEC-10 Buffer Overflow via Environment Variables Likelihood: High · Severity: High
  • CAPEC-13 Subverting Environment Variable Values Likelihood: High · Severity: Very High
  • CAPEC-14 Client-side Injection-induced Buffer Overflow Likelihood: Medium · Severity: High
  • CAPEC-22 Exploiting Trust in Client Likelihood: High · Severity: High
  • CAPEC-23 File Content Injection Likelihood: High · Severity: Very High
  • CAPEC-24 Filter Failure through Buffer Overflow Likelihood: High · Severity: High
  • CAPEC-28 Fuzzing Likelihood: High · Severity: Medium
  • CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies Likelihood: High · Severity: High
  • CAPEC-42 MIME Conversion Likelihood: High · Severity: High
  • CAPEC-43 Exploiting Multiple Input Interpretation Layers Likelihood: Medium · Severity: High
  • CAPEC-45 Buffer Overflow via Symbolic Links Likelihood: High · Severity: High
  • CAPEC-46 Overflow Variables and Tags Likelihood: High · Severity: High
  • CAPEC-47 Buffer Overflow via Parameter Expansion Likelihood: Medium · Severity: High
  • CAPEC-52 Embedding NULL Bytes Likelihood: High · Severity: High
  • CAPEC-53 Postfix, Null Terminate, and Backslash Likelihood: High · Severity: High
  • CAPEC-63 Cross-Site Scripting (XSS) Likelihood: High · Severity: Very High
  • CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic Likelihood: High · Severity: High
  • CAPEC-67 String Format Overflow in syslog() Likelihood: High · Severity: Very High
  • CAPEC-71 Using Unicode Encoding to Bypass Validation Logic Likelihood: Medium · Severity: High
  • CAPEC-72 URL Encoding Likelihood: High · Severity: High
  • CAPEC-73 User-Controlled Filename Likelihood: High · Severity: High
  • CAPEC-78 Using Escaped Slashes in Alternate Encoding Likelihood: High · Severity: High
  • CAPEC-79 Using Slashes in Alternate Encoding Likelihood: High · Severity: High
  • CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic Likelihood: High · Severity: High
  • CAPEC-81 Web Server Logs Tampering Likelihood: Medium · Severity: High
  • CAPEC-83 XPath Injection Likelihood: High · Severity: High
  • CAPEC-85 AJAX Footprinting Likelihood: High · Severity: Low
  • CAPEC-88 OS Command Injection Likelihood: High · Severity: High
  • CAPEC-101 Server Side Include (SSI) Injection Likelihood: High · Severity: High
  • CAPEC-104 Cross Zone Scripting Likelihood: Medium · Severity: High
  • CAPEC-108 Command Line Execution through SQL Injection Likelihood: Low · Severity: Very High
  • CAPEC-109 Object Relational Mapping Injection Likelihood: Low · Severity: High
  • CAPEC-110 SQL Injection through SOAP Parameter Tampering Likelihood: High · Severity: Very High
  • CAPEC-120 Double Encoding Likelihood: Low · Severity: Medium
  • CAPEC-135 Format String Injection Likelihood: High · Severity: High
  • CAPEC-136 LDAP Injection Likelihood: High · Severity: High
  • CAPEC-153 Input Data Manipulation Severity: Medium
  • CAPEC-182 Flash Injection Likelihood: High · Severity: Medium
  • CAPEC-209 XSS Using MIME Type Mismatch Severity: Medium
  • CAPEC-230 Serialized Data with Nested Payloads Likelihood: Medium · Severity: High
  • CAPEC-231 Oversized Serialized Data Payloads Likelihood: Medium · Severity: High
  • CAPEC-250 XML Injection Likelihood: High
  • CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data Severity: Medium
  • CAPEC-267 Leverage Alternate Encoding Likelihood: High · Severity: High
  • CAPEC-473 Signature Spoof
  • CAPEC-588 DOM-Based XSS Likelihood: High · Severity: Very High
  • CAPEC-664 Server Side Request Forgery Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-20, as MITRE names them. Credits.

Ask an AI about CWE-20

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-20: Improper Input Validation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/20.html and https://cve.bz/cve/cwe/20?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.4CVE-2017-18465EPSS 0.3%

    cPanel before 62.0.17 does not have a sufficient list of reserved usernames (SEC-227).

  2. 4.9CVE-2017-18464EPSS 0.7%

    cPanel before 62.0.17 allows arbitrary file-overwrite operations via the WHM Zone Template editor (SEC-226).

  3. 5.3CVE-2019-7899EPSS 0.9%

    Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9,…

  4. 5.3CVE-2019-7898EPSS 0.9%

    Samples of disabled downloadable products are accessible in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to inadequate…

  5. 8.8CVE-2019-7885EPSS 2.0%

    Insufficient input validation in the config builder of the Elastic search module could lead to remote code execution in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This vulnerability could be abused…

  6. 7.8CVE-2017-18463EPSS 0.5%

    cPanel before 62.0.17 allows code execution in the context of the root account via a long DocumentRoot path (SEC-225).

  7. 4.3CVE-2017-18461EPSS 0.7%

    cPanel before 62.0.17 allows does not preserve security policy questions across an account rename (SEC-223).

  8. 7.8CVE-2017-18460EPSS 0.5%

    cPanel before 62.0.17 allows arbitrary code execution during automatic SSL installation (SEC-221).

  9. 7.8CVE-2017-18459EPSS 0.5%

    cPanel before 62.0.17 allows arbitrary code execution during account modification (SEC-220).

  10. 3.3CVE-2017-18458EPSS 0.3%

    cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).

  11. 4.9CVE-2017-18453EPSS 0.7%

    cPanel before 64.0.21 does not preserve supplemental groups across account renames (SEC-260).

  12. 6.7CVE-2017-18452EPSS 0.4%

    cPanel before 64.0.21 allows code execution via Rails configuration files (SEC-259).

  13. 5.5CVE-2017-18449EPSS 0.3%

    cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254).

  14. 6.3CVE-2017-18447EPSS 0.9%

    cPanel before 64.0.21 allows demo accounts to execute code via the ClamScanner_getsocket API (SEC-251).

  15. 5.3CVE-2017-18444EPSS 0.8%

    cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).

  16. 5.8CVE-2017-18443EPSS 0.8%

    cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding (SEC-247).

  17. 4.3CVE-2017-18440EPSS 0.7%

    cPanel before 64.0.21 allows demo users to execute traceroute via api2 (SEC-244).

  18. 6.3CVE-2017-18439EPSS 0.9%

    cPanel before 64.0.21 allows demo accounts to execute code via an ImageManager_dimensions API call (SEC-243).

  19. 9.8CVE-2019-9141EPSS 2.4%

    ZInsVX.dll ActiveX Control 2018.02 and earlier in Zoneplayer contains a vulnerability that could allow remote attackers to execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for remote code execut…

  20. 7.8CVE-2017-18434EPSS 0.5%

    cPanel before 64.0.21 allows code execution in the context of the root account via a SET_VHOST_LANG_PACKAGE multilang adminbin call (SEC-237).

  21. 8.8CVE-2017-18433EPSS 1.9%

    cPanel before 64.0.21 allows code execution by webmail and demo accounts via a store_filter API call (SEC-236).

  22. 7.5CVE-2017-18431EPSS 0.9%

    cPanel before 66.0.1 does not reliably perform suspend/unsuspend operations on accounts (CPANEL-13941).

  23. 4.7CVE-2017-18430EPSS 0.7%

    In cPanel before 66.0.2, user and group ownership may be incorrectly set when using reassign_post_terminate_cruft (SEC-294).

  24. 7.8CVE-2017-18415EPSS 0.4%

    cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).

  25. 6.8CVE-2017-18411EPSS 0.9%

    The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285).

  26. 6.5CVE-2017-18410EPSS 0.9%

    In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).

  27. 6.5CVE-2017-18409EPSS 0.9%

    In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283).

  28. 5.5CVE-2017-18405EPSS 0.4%

    cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345).

  29. 2.7CVE-2017-18401EPSS 0.6%

    cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).

  30. 3.8CVE-2017-18398EPSS 0.6%

    DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).

  31. 2.7CVE-2017-18395EPSS 0.7%

    cPanel before 68.0.15 does not block a username of ssl (SEC-328).

  32. 2.7CVE-2017-18394EPSS 0.7%

    cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).

  33. 2.7CVE-2017-18393EPSS 0.7%

    cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326).

  34. 2.0CVE-2017-18392EPSS 0.5%

    cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).

  35. 7.8CVE-2017-18388EPSS 0.4%

    cPanel before 68.0.15 can perform unsafe file operations because Jailshell does not set the umask (SEC-315).

  36. 2.7CVE-2017-18382EPSS 0.7%

    cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).

  37. 8.8CVE-2016-10816EPSS 1.7%

    cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders (SEC-121).

  38. 8.8CVE-2016-10814EPSS 1.3%

    cPanel before 57.9999.54 allows demo-mode escape via show_template.stor (SEC-119).

  39. 9.8CVE-2016-10824EPSS 2.5%

    cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90).

  40. 8.8CVE-2016-10823EPSS 2.1%

    cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89).

  41. 6.5CVE-2016-10842EPSS 1.1%

    cPanel before 11.54.0.4 allows certain file-read operations in bin/setup_global_spam_filter.pl (SEC-74).

  42. 5.5CVE-2018-20917EPSS 0.3%

    cPanel before 70.0.23 allows any user to disable Solr (SEC-371).

  43. 6.3CVE-2018-20912EPSS 1.0%

    cPanel before 70.0.23 allows demo accounts to execute code via awstats (SEC-362).

  44. 9.8CVE-2016-10858EPSS 2.5%

    cPanel before 11.54.0.0 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-64).

  45. 9.8CVE-2016-10855EPSS 2.6%

    cPanel before 11.54.0.4 allows unauthenticated arbitrary code execution via cpsrvd (SEC-91).

  46. 8.8CVE-2016-10850EPSS 2.1%

    cPanel before 11.54.0.4 allows arbitrary code execution via scripts/synccpaddonswithsqlhost (SEC-83).

  47. 2.8CVE-2018-20897EPSS 0.3%

    cPanel before 71.9980.37 allows arbitrary file-unlink operations via the cPAddons moderation system (SEC-395).

  48. 7.2CVE-2018-20895EPSS 1.0%

    In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).

  49. 2.3CVE-2018-20893EPSS 0.3%

    cPanel before 74.0.0 allows file-rename operations during account renames (SEC-442).

  50. 5.5CVE-2018-20891EPSS 0.4%

    cPanel before 74.0.0 allows arbitrary file-read operations during File Restoration (SEC-436).