CWE-20: Improper Input Validation, page 83

Filter

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

What the weakness is: CWE-20 at MITRE. OWASP Top 10: A05:2025 Injection

Related attack patterns (CAPEC): 51

CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters Likelihood: Medium · Severity: Medium
CAPEC-7 Blind SQL Injection Likelihood: High · Severity: High
CAPEC-8 Buffer Overflow in an API Call Likelihood: High · Severity: High
CAPEC-9 Buffer Overflow in Local Command-Line Utilities Likelihood: High · Severity: High
CAPEC-10 Buffer Overflow via Environment Variables Likelihood: High · Severity: High
CAPEC-13 Subverting Environment Variable Values Likelihood: High · Severity: Very High
CAPEC-14 Client-side Injection-induced Buffer Overflow Likelihood: Medium · Severity: High
CAPEC-22 Exploiting Trust in Client Likelihood: High · Severity: High
CAPEC-23 File Content Injection Likelihood: High · Severity: Very High
CAPEC-24 Filter Failure through Buffer Overflow Likelihood: High · Severity: High
CAPEC-28 Fuzzing Likelihood: High · Severity: Medium
CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies Likelihood: High · Severity: High
CAPEC-42 MIME Conversion Likelihood: High · Severity: High
CAPEC-43 Exploiting Multiple Input Interpretation Layers Likelihood: Medium · Severity: High
CAPEC-45 Buffer Overflow via Symbolic Links Likelihood: High · Severity: High
CAPEC-46 Overflow Variables and Tags Likelihood: High · Severity: High
CAPEC-47 Buffer Overflow via Parameter Expansion Likelihood: Medium · Severity: High
CAPEC-52 Embedding NULL Bytes Likelihood: High · Severity: High
CAPEC-53 Postfix, Null Terminate, and Backslash Likelihood: High · Severity: High
CAPEC-63 Cross-Site Scripting (XSS) Likelihood: High · Severity: Very High
CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic Likelihood: High · Severity: High
CAPEC-67 String Format Overflow in syslog() Likelihood: High · Severity: Very High
CAPEC-71 Using Unicode Encoding to Bypass Validation Logic Likelihood: Medium · Severity: High
CAPEC-72 URL Encoding Likelihood: High · Severity: High
CAPEC-73 User-Controlled Filename Likelihood: High · Severity: High
CAPEC-78 Using Escaped Slashes in Alternate Encoding Likelihood: High · Severity: High
CAPEC-79 Using Slashes in Alternate Encoding Likelihood: High · Severity: High
CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic Likelihood: High · Severity: High
CAPEC-81 Web Server Logs Tampering Likelihood: Medium · Severity: High
CAPEC-83 XPath Injection Likelihood: High · Severity: High
CAPEC-85 AJAX Footprinting Likelihood: High · Severity: Low
CAPEC-88 OS Command Injection Likelihood: High · Severity: High
CAPEC-101 Server Side Include (SSI) Injection Likelihood: High · Severity: High
CAPEC-104 Cross Zone Scripting Likelihood: Medium · Severity: High
CAPEC-108 Command Line Execution through SQL Injection Likelihood: Low · Severity: Very High
CAPEC-109 Object Relational Mapping Injection Likelihood: Low · Severity: High
CAPEC-110 SQL Injection through SOAP Parameter Tampering Likelihood: High · Severity: Very High
CAPEC-120 Double Encoding Likelihood: Low · Severity: Medium
CAPEC-135 Format String Injection Likelihood: High · Severity: High
CAPEC-136 LDAP Injection Likelihood: High · Severity: High
CAPEC-153 Input Data Manipulation Severity: Medium
CAPEC-182 Flash Injection Likelihood: High · Severity: Medium
CAPEC-209 XSS Using MIME Type Mismatch Severity: Medium
CAPEC-230 Serialized Data with Nested Payloads Likelihood: Medium · Severity: High
CAPEC-231 Oversized Serialized Data Payloads Likelihood: Medium · Severity: High
CAPEC-250 XML Injection Likelihood: High
CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data Severity: Medium
CAPEC-267 Leverage Alternate Encoding Likelihood: High · Severity: High
CAPEC-473 Signature Spoof
CAPEC-588 DOM-Based XSS Likelihood: High · Severity: Very High
CAPEC-664 Server Side Request Forgery Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-20, as MITRE names them. Credits.

Ask an AI about CWE-20

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-20: Improper Input Validation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/20.html and https://cve.bz/cve/cwe/20?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.8CVE-2023-0100EPSS 0.8%2023-03-15
In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indic…
6.5CVE-2023-24866EPSS 1.5%2023-03-14
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
6.5CVE-2023-24865EPSS 1.5%2023-03-14
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
7.5CVE-2023-24856EPSS 1.5%2023-03-14
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
7.8CVE-2023-23419EPSS 0.4%2023-03-14
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
7.8CVE-2023-23416EPSS 7.6%2023-03-14
Windows Cryptographic Services Remote Code Execution Vulnerability
5.5CVE-2023-23409EPSS 0.5%2023-03-14
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
9.8CVE-2023-23397KEVEPSS 97%2023-03-14
Microsoft Outlook Elevation of Privilege Vulnerability
5.5CVE-2023-24579EPSS 0.2%2023-03-13
McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt.
9.8CVE-2023-24033EPSS 33%2023-03-13
The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a deni…
6.1CVE-2023-24975EPSS 0.4%2023-03-10
IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scrip…
8.8CVE-2020-5002EPSS 0.6%2023-03-10
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954.
5.5CVE-2023-25947EPSS 0.2%2023-03-10
The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HA…
5.5CVE-2023-24465EPSS 0.2%2023-03-10
Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current applica…
7.5CVE-2023-22301EPSS 0.6%2023-03-10
The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.
6.5CVE-2022-3767EPSS 0.8%2023-03-09
Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless of the host.
4.9CVE-2023-27484EPSS 0.7%2023-03-09
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly privileged user able to create or update Compositions can specify an arbitrarily …
7.5CVE-2023-27483EPSS 0.8%2023-03-09
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the `Paved` type's …
4.4CVE-2023-20651EPSS 0.09%2023-03-07
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629576;…
6.7CVE-2023-20650EPSS 0.10%2023-03-07
In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762957…
4.4CVE-2023-20649EPSS 0.09%2023-03-07
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628607;…
4.4CVE-2023-20648EPSS 0.09%2023-03-07
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612;…
4.4CVE-2023-20647EPSS 0.09%2023-03-07
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628547;…
4.4CVE-2023-20646EPSS 0.09%2023-03-07
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628536;…
4.4CVE-2023-20645EPSS 0.09%2023-03-07
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609;…
4.4CVE-2023-20644EPSS 0.09%2023-03-07
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628603;…
6.7CVE-2023-20643EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762858…
6.7CVE-2023-20642EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762858…
6.7CVE-2023-20641EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762957…
6.7CVE-2023-20640EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762957…
6.7CVE-2023-20639EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762858…
6.7CVE-2023-20638EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762853…
6.7CVE-2023-20637EPSS 0.10%2023-03-07
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0762858…
6.7CVE-2023-20636EPSS 0.10%2023-03-07
In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…
6.7CVE-2023-20634EPSS 0.1%2023-03-07
In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP…
6.7CVE-2023-20626EPSS 0.09%2023-03-07
In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS074…
6.7CVE-2023-20621EPSS 0.09%2023-03-07
In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS076…
8.6CVE-2022-4904EPSS 1.2%2023-03-06
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact o…
5.3CVE-2021-36402EPSS 0.5%2023-03-06
In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration phishing risk.
8.8CVE-2022-3294EPSS 1.6%2023-03-01
Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows cli…
7.5CVE-2023-26281EPSS 1.1%2023-03-01
IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296.
7.2CVE-2023-20009EPSS 2.2%2023-03-01
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their pr…
5.3CVE-2022-20952EPSS 0.7%2023-03-01
A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance (WSA), could allow an unauthenticated, remote attacker to bypass a configured rule, thereby al…
3.3CVE-2023-20932EPSS 0.1%2023-02-28
In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges ne…
7.5CVE-2022-40237EPSS 0.7%2023-02-27
IBM MQ for HPE NonStop 8.1.0 is vulnerable to a denial of service attack due to an error within the CCDT and channel synchronization logic. IBM X-Force ID: 235727.
9.8CVE-2021-35370EPSS 1.0%2023-02-24
An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.
9.8CVE-2023-25696EPSS 2.0%2023-02-24
Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.
9.8CVE-2023-25693EPSS 1.9%2023-02-24
Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.
7.5CVE-2023-25692EPSS 1.8%2023-02-24
Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.
9.8CVE-2023-25691EPSS 1.6%2023-02-24
Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.