CWEweakness

CWE-222 Truncation of Security-relevant Information

Official page ↗
Abstraction
Base
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product truncates the display, recording, or processing of security-relevant information in a way that can obscure the source or nature of an attack.

Common consequences

• Non-Repudiation: Hide Activities — The source of an attack will be difficult or impossible to determine. This can allow attacks to the system to continue without notice.

Observed examples

• CVE-2005-0585: Web browser truncates long sub-domains or paths, facilitating phishing. • CVE-2004-2032: Bypass URL filter via a long URL with a large number of trailing hex-encoded space characters. • CVE-2003-0412: application server does not log complete URI of a long request (truncation).

Related

Observed example · CVE (3)

  • CVE-2005-0585 Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites… vulnerability
  • CVE-2004-2032 Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large… vulnerability
  • CVE-2003-0412 Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers… vulnerability

Child of · CWE (1)

  • CWE-221 Information Loss or Omission weakness

Referenced by CVE · weakness (1)

  • CVE-2026-35030 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. vulnerability

Referenced by CWE · has member (1)