CWE-178

Improper Handling of Case Sensitivity

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

86 vulnerabilities with CWE-178
CVE-2023-46218 MEDIUM
curl 7.46.0-8.4.0 - Super Cookie Injection via Public Suffix Case Bypass
CVSS 6.5
CVE-2023-3545 CRITICAL
Chamilo < 1.11.20 - Unauthenticated Remote Code Execution via .htaccess File Upload
CVSS 9.8
CVE-2023-4759 HIGH
Eclipse JGit <= 6.6.0 - Arbitrary File Overwrite via Symbolic Link on Case-Insensitive Filesystem
CVSS 8.8
CVE-2022-29604 CRITICAL
ONOS 2.5.1 - Improper Handling of Case Sensitivity in Intent Framework
CVSS 9.8
CVE-2022-22968 MEDIUM
Spring Framework <5.3.18,<5.2.20 - Info Disclosure
CVSS 5.3
CVE-2021-45893 HIGH
Softwarebuero Zauner ARC 4.2.0.4 - Info Disclosure
CVSS 7.5
CVE-2021-25036 HIGH
All in One SEO WordPress <4.1.5.3 - Privilege Escalation
CVSS 8.8
CVE-2021-0973 MEDIUM
Android 12 - Local Information Disclosure via Case Sensitivity Bypass in UriUtil.java
CVSS 5.0
CVE-2021-39134 HIGH
@npmcli/arborist < 2.8.2 - Arbitrary File Write via Case-Insensitive Dependency Resolution
CVSS 8.2
CVE-2021-39155 HIGH
Istio < 1.9.8 - Authorization Policy Bypass via Case-Sensitive Hostname Comparison
CVSS 8.3
CVE-2021-24347 HIGH
SP Project & Document Manager <4.22 - Path Traversal
CVSS 8.8
CVE-2021-28323 MEDIUM
Windows DNS - Information Disclosure via Improper Handling of Case Sensitivity
CVSS 6.5
CVE-2021-25920 MEDIUM
OpenEMR <6.0.0 - Privilege Escalation
CVSS 6.5
CVE-2020-15234 MEDIUM
ORY Fosite < 0.34.1 - Open Redirect via Case-Insensitive URL Comparison
CVSS 6.1
CVE-2020-12812 CRITICAL KEV
FortiOS 6.4.0, 6.2.0-6.2.3, <6.0.10 - Improper Authentication via Username Case Variation
CVSS 9.8
CVE-2020-5301 LOW
SimpleSAMLphp < 1.18.6 - Information Disclosure via Case-Insensitive PHP File Extension Handling
CVSS 3.0
CVE-2019-6289 HIGH
DedeCMS V57_UTF8_SP2 - Remote Code Execution via Mixed-Case PHP Extension Bypass
CVSS 8.8
CVE-2018-8337 MEDIUM
Windows Subsystem for Linux - Auth Bypass
CVSS 5.3
CVE-2018-9845 CRITICAL
Etherpad Lite <1.6.4 - Privilege Escalation
CVSS 9.8
CVE-2017-8493 MEDIUM
Windows Security Feature Bypass via Case Sensitivity Mismatch
CVSS 5.5
CVE-2007-3365 HIGH
myserver < 0.8.9 - Sensitive Information Exposure via Case Sensitivity Bypass
CVSS 7.5
CVE-2005-0269 CRITICAL
GNUBoard < 3.40 - Unauthenticated Arbitrary File Upload via Case Sensitivity Bypass
CVSS 9.8
CVE-2004-2154 CRITICAL
CUPS < 1.1.21 - Unauthenticated ACL Bypass via Case Sensitivity Mismatch
CVSS 9.8
CVE-2004-2214 CRITICAL
Mbedthis AppWeb <1.1.3 - Auth Bypass
CVSS 9.8
CVE-2004-1083 HIGH
Apache for Apple Mac OS X 10.2.8-10.3.6 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities 86
Links
MITRE CWE Entry Search this CWE With Exploits