CWEweakness

CWE-231 Improper Handling of Extra Values

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product does not handle or incorrectly handles when more values are provided than expected.

Common consequences

• Integrity: Unexpected State

Related

Can precede · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

Child of · CWE (1)

  • CWE-229 Improper Handling of Values weakness

Referenced by CVE · weakness (5)

  • CVE-2026-22888 Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings,… vulnerability
  • CVE-2024-20268 A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco… vulnerability
  • CVE-2023-6841 A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an attacker by sending… vulnerability
  • CVE-2024-31397 Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. vulnerability
  • CVE-2023-44386 Vapor is an HTTP web framework for Swift. vulnerability