Common Weakness Enumeration
CWE-838 Inappropriate Encoding for Output Context
Description
The product uses or specifies an encoding when generating output to a downstream component, but the specified encoding is not the same as the encoding that is expected by the downstream component.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-838 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-5rqc-86vf-g8r2 | CVE-2026-55859 | MODERATE |
org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output |
2026-08-28 | |
| GHSA-xvr9-35cr-46v9 | CVE-2026-55858 | MODERATE |
org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context |
2026-08-28 | |
| GHSA-vvh5-7v3m-j3mj | CVE-2024-34006 | MODERATE | - |
Moodle Unsanitized HTML in site log for config_log_created |
2025-05-15 |
| GHSA-g975-f26h-93g8 | CVE-2022-43408 | HIGH |
Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins |
2023-10-27 | |
| GHSA-jhcf-j4hg-v64r | CVE-2019-18981 | CRITICAL | - |
Pimcore Access Control Issues |
2023-09-26 |
| GHSA-g66m-fqxf-3w35 | CVE-2022-43407 | HIGH |
CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin |
2022-12-16 |