CWE-1057: Data Access Operations Outside of Expected Data Manager Component
Filter
The product uses a dedicated, central data manager component as required by design, but it contains code that performs data-access operations that do not use this data manager.
What the weakness is: CWE-1057 at MITRE. All weaknesses
Ask an AI about CWE-1057
Show the prompt
Explain CWE-1057: Data Access Operations Outside of Expected Data Manager Component and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1057.html and https://cve.bz/cve/cwe/1057?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.3CVE-2024-8143EPSS 0.5%
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history fol…