CWE-360: Trust of System Event Data

Filter

Security based on event locations are insecure and can be spoofed.

What the weakness is: CWE-360 at MITRE. All weaknesses

Ask an AI about CWE-360

Show the prompt

Explain CWE-360: Trust of System Event Data and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/360.html and https://cve.bz/cve/cwe/360?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

6.8CVE-2024-3371EPSS 0.2%2024-04-24
MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application behavior, including data disclosure and enabling attackers to impersonate users. This issue affects …
5.4CVE-2017-0911EPSS 0.5%2018-02-09
Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter" authentication i…