CWE-1125: Excessive Attack Surface

Filter

The product has an attack surface whose quantitative measurement exceeds a desirable maximum.

What the weakness is: CWE-1125 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Ask an AI about CWE-1125

Show the prompt

Explain CWE-1125: Excessive Attack Surface and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1125.html and https://cve.bz/cve/cwe/1125?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.8CVE-2024-5386EPSS 0.5%2026-02-02
In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijack another user's account by obtaining the password reset to…
6.5CVE-2023-49722EPSS 0.4%2024-01-09
Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.
9.8CVE-2023-0435EPSS 0.7%2023-01-22
Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.
8.0CVE-2022-2037EPSS 1.2%2022-06-09
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.
9.8CVE-2022-1715EPSS 1.4%2022-05-13
Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.