Common Weakness Enumeration

CWE-148 Improper Neutralization of Input Leaders

Description

The product does not properly handle when a leading character or sequence ("leader") is missing or malformed, or if multiple leaders are used when only one should be allowed.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-148 ordered by modification date.

1 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-4f4r-wgv2-jjvg	CVE-2023-4853	HIGH	maven/io.quarkus/quarkus-csrf-reactive maven/io.quarkus/quarkus-keycloak-authorization maven/io.quarkus/quarkus-undertow maven/io.quarkus/quarkus-vertx-http	Quarkus HTTP vulnerable to incorrect evaluation of permissions	2023-10-27