CWEweakness

CWE-237 Improper Handling of Structural Elements

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product does not handle or incorrectly handles inputs that are related to complex structures.

Common consequences

• Integrity: Unexpected State

Related

Child of · CWE (1)

  • CWE-228 Improper Handling of Syntactically Invalid Structure weakness

Referenced by CVE · weakness (4)

  • CVE-2026-45411 vm2 is an open source vm/sandbox for Node.js. vulnerability
  • CVE-2025-24336 SXF Common Library handles input data improperly. vulnerability
  • CVE-2023-6110 A flaw was found in OpenStack. vulnerability
  • CVE-2023-34429 Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token. vulnerability

Referenced by CWE · child of (3)

  • CWE-238 Improper Handling of Incomplete Structural Elements weakness
  • CWE-239 Failure to Handle Incomplete Element weakness
  • CWE-240 Improper Handling of Inconsistent Structural Elements weakness