CWE-344: Use of Invariant Value in Dynamically Changing Context
Filter
The product uses a constant value, name, or reference, but this value can (or should) vary across different environments.
What the weakness is: CWE-344 at MITRE. All weaknesses
Ask an AI about CWE-344
Show the prompt
Explain CWE-344: Use of Invariant Value in Dynamically Changing Context and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/344.html and https://cve.bz/cve/cwe/344?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 5.1CVE-2026-42961EPSS 0.2%
ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the user may be tricked to do unintended operations.
- 7.5CVE-2023-22746EPSS 0.7%
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't s…
- 5.3CVE-2022-36022EPSS 0.5%
Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets …