Common Weakness Enumeration

CWE-235 Improper Handling of Extra Parameters

Description

The product does not handle or incorrectly handles when the number of parameters, fields, or arguments with the same name exceeds the expected amount.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-235 ordered by modification date.

2 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-92hr-gmr6-h8cp	-	MODERATE	npm/ep_etherpad-lite	Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling	2026-08-17
GHSA-fr54-72wr-cqvq	CVE-2017-20160	CRITICAL	npm/express-param	express-param vulnerable to Improper Handling of Extra Parameters	2023-01-09