CWE-152 Improper Neutralization of Macro Symbols

variant

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as macro symbols when they are sent to a downstream component.

parent weaknesses

Broader classes this is a kind of.

CWE-138Improper Neutralization of Special Elements

vulnerabilities (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-0247US	high10.0	3.89% (90th)	—	2014-07-03
LibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and attack vectors, possibly related to doc/docmacromode.cxx.
CVE-2024-55579US	—OT elevated	0.47% (41st)	—	2024-12-09
An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. An unprivileged user with network access may be able to create connection objects that trigger…

source

Where this definition is published.

MITREUS

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan