On this page

CWE-178: Improper Handling of Case Sensitivity

Weakness Summary

The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

  • Canonical source: MITRE CWE-178 (opens in a new tab)
  • Published Atomicorp CVE observations: 2
  • Distinct affected products in those observations: 2
  • Active Atomicorp rules associated with this weakness: 10

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2026-47323Apache Camel: Camel-CXF Message Header Injection via Missing Inbound FilteringcamelProtected by Atomicorp rules390719
CVE-2021-24347Wordpress Plugin SP Project and Document - Authenticated Remote Code Executionsp project & document managerProtected by Atomicorp rules330791 , 334168 , 340128 , 340133 , 340152 , 360152 , 377360 , 382238 , 390801

Associated Atomicorp WAF Rules

RuleStatusBehavior
330791Activedisruptive (deny)
334168Activedisruptive (deny)
340128Activedisruptive (deny)
340133Activedisruptive (deny)
340152Activedisruptive (deny)
360152Activedisruptive (deny)
377360Activenon-disruptive (pass)
382238Activedisruptive (deny)
390719Activedisruptive (deny)
390801Activedisruptive (deny)