Common Weakness Enumeration

CWE-233 Improper Handling of Parameters

Description

The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-233 ordered by modification date.

8 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-6vjf-48fh-vxxj	CVE-2024-25979	MODERATE	-	Improper Handling of Parameters in moodle	2025-01-23
GHSA-hvw5-3mgw-7rcf	CVE-2023-1419	MODERATE	maven/io.debezium/debezium-connector-mysql maven/io.debezium/debezium-connector-sqlserver maven/io.debezium/debezium-core	Debezium database connector has a script injection vulnerability	2024-11-18
GHSA-g6rj-rv7j-xwp4	CVE-2021-28675	HIGH	pypi/pillow	Pillow denial of service	2024-10-09
GHSA-jq3f-mfmg-747x	CVE-2024-9329	MODERATE	maven/org.glassfish.main.admin/rest-service	Eclipse Glassfish improperly handles http parameters	2024-10-07
GHSA-r8xx-8vm8-x6wj	CVE-2023-50724	MODERATE	gem/resque	Resque vulnerable to Reflected Cross Site Scripting through pathnames	2024-01-19
GHSA-r9mq-m72x-257g	CVE-2023-50727	MODERATE	gem/resque	Resque vulnerable to reflected XSS in Queue Endpoint	2023-12-22
GHSA-gc3j-vvwf-4rp8	CVE-2023-50725	MODERATE	gem/resque	Resque vulnerable to reflected XSS in resque-web failed and queues lists	2023-12-22
GHSA-cpx3-93w7-457x	CVE-2022-3697	HIGH	pypi/ansible	Ansible leaks password to logs	2023-08-31