CyberSecBulletin

Only Filtering Special Elements at an Absolute Position

CWE-797

The product receives data from an upstream component, but only accounts for special elements at an absolute position (e.g. byte number 10), thereby missing remaining special elements that may exist before sending it to a downstream component.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 9.8.

Latest Only Filtering Special Elements at an Absolute Position vulnerabilities