CWE-610 - Externally Controlled Reference to a Resource in Another Sphere

Description

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.





Latest vulnerabilities for CWE-610

Multiple vulnerabilities in Siemens RUGGEDCOM APE1808 2024-04-15
Medium No
Information disclosure in Palo Alto PAN-OS 2024-04-15
Low Yes
Externally controlled reference to a resource in another sphere in InfoSphere Information Server 2024-02-20
Low Yes
Multiple vulnerabilities in Netcool Operations Insight 2024-02-05
High Yes
Externally Controlled Reference to a Resource in Another Sphere in WAGO PFC200 Series 2023-11-22
Low Yes
Denial of service in WireGuard client for Windows 2023-10-31
Medium No
Information disclosure in ruby-mysql 2022-10-03
Low Yes
Multiple vulnerabilities in Moodle 2021-07-19
High Yes
Information disclosure in Spring Cloud Netflix 2020-08-07
Medium Yes
Externally Controlled Reference to a Resource in Another Sphere in Google, Google Android 2020-06-11
Low Yes

References

Description of CWE-610 on Mitre website