CyberSecBulletin

Improper Handling of Extra Parameters

CWE-235

The product does not handle or incorrectly handles when the number of parameters, fields, or arguments with the same name exceeds the expected amount.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 9.1.

Latest Improper Handling of Extra Parameters vulnerabilities

  • 9.1 Critical severity

    OX Dovecot Pro: Improper Handling of Extra Parameters

    CVE-2026-27851Open-Xchange

    When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using sa