CWE-231 Improper Handling of Extra Values

variant

The product does not handle or incorrectly handles when more values are provided than expected.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (5)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-22888UShigh7.5—
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
CVE-2023-44386USmedium5.3—
Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected versions of Vapor. The HTTP1 error handler closed connections w…
CVE-2024-20268US——
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could…
CVE-2023-6841US——
A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending repeated HTTP requests could cause a resourc…
CVE-2024-31397US——
Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative pr…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan