CWE-148

3 CVEs classified under CWE-148. Browse by severity and year.

Top CVEs for CWE-148
CVESeverityScorePublishedSummary
CVE-2023-4853High8.12023-09-20A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in inco…
CVE-2024-53856High7.52024-12-05rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability i…
CVE-2026-128622026-06-22Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of…
All CVEs classified under CWE-148 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-128622026-06-22Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of…
CVE-2024-53856High7.52024-12-05rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability i…
CVE-2023-4853High8.12023-09-20A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in inco…