目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

CWE-172 编码错误 类漏洞列表 6

CWE-172 编码错误 类弱点 6 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-172 编码错误属于数据处理缺陷，指软件未能正确编码或解码数据，导致产生非预期值。攻击者常利用此漏洞注入恶意载荷或引发逻辑混乱，从而绕过安全机制或造成系统异常。开发者应避免此类问题，需严格验证输入数据格式，使用标准化的编码库处理字符转换，并确保在数据传递、存储及展示环节保持一致的编码规范，以消除解析歧义。

MITRE CWE 官方描述
CWE：CWE-172 编码错误 (Encoding Error) 英文：产品未能正确编码或解码数据，导致出现意外值。
常见影响 (1)
IntegrityUnexpected State
缓解措施 (3)
ImplementationAssume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all potentially relevant properties, including length, type of input, the full range…
ImplementationWhile it is risky to use dynamically-generated query strings, code, or commands that mix control and data together, sometimes it may be unavoidable. Properly quote arguments and escape any special characters within those arguments. The most conservative approach is to escape or filter all characters that do not pass an extremely strict allowlist (such as everything that is not alphanumeric or whit…
ImplementationInputs should be decoded and canonicalized to the application's current internal representation before being validated (CWE-180). Make sure that the application does not decode the same input twice (CWE-174). Such errors could be used to bypass allowlist validation schemes by introducing dangerous inputs after they have been checked.
CVE ID标题CVSS风险等级Published
CVE-2025-27110 ModSecurity 安全漏洞 — ModSecurity 5.3 -2025-02-25
CVE-2024-48909 SpiceDB 安全漏洞 — spicedb 2.0 Low2024-10-14
CVE-2021-33604 vaadin:flow-server 安全漏洞 — Vaadin 2.5 Low2021-06-24
CVE-2019-12677 Cisco Adaptive Security Appliance Software 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software 6.5 -2019-10-02
CVE-2019-10153 fence-agents 安全漏洞 — fence-agents 5.0 -2019-07-30
CVE-2019-10160 Python 信任管理问题漏洞 — python 9.8 -2019-06-07

CWE-172（编码错误） 是常见的弱点类别，本平台收录该类弱点关联的 6 条 CVE 漏洞。