CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

Description

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

Latest vulnerabilities for CWE-610

Information disclosure in ruby-mysql 2022-10-03
Low Yes

Multiple vulnerabilities in Moodle 2021-07-19
High Yes

Information disclosure in Spring Cloud Netflix 2020-08-07
Medium Yes

Externally Controlled Reference to a Resource in Another Sphere in Google, Google Android 2020-06-11
Low Yes

Multiple vulnerabilities in QNAP Systems QTS and Photo Station 2019-12-25
High Yes

Externally Controlled Reference to a Resource in Another Sphere in Google, Google Android 2019-09-27
Low Yes

Externally Controlled Reference to a Resource in Another Sphere in Google, Google Android 2019-09-27
Low Yes

Externally Controlled Reference to a Resource in Another Sphere in Google, Google Android 2019-09-27
Low Yes

Externally Controlled Reference to a Resource in Another Sphere in Google, Google Android 2019-02-12
Low Yes

Externally Controlled Reference to a Resource in Another Sphere in Shopware Shopware 2019-01-15
Medium Yes

References

Description of CWE-610 on Mitre website