cve.bz

CWE-792: Incomplete Filtering of One or More Instances of Special Elements

Filter

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

What the weakness is: CWE-792 at MITRE. All weaknesses

Ask an AI about CWE-792

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-792: Incomplete Filtering of One or More Instances of Special Elements and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/792.html and https://cve.bz/cve/cwe/792?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.7CVE-2025-12758EPSS 0.6%

    Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) a…

  2. 6.5CVE-2025-47779EPSS 0.5%

    Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authent…

  3. 6.5CVE-2023-25608EPSS 0.6%

    An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6…

  4. 5.5CVE-2022-22297EPSS 0.2%

    An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWe…

  5. 5.3CVE-2023-20057EPSS 0.7%

    A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerabi…