cve.bz

CWE-573: Improper Following of Specification by Caller

Filter

The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.

What the weakness is: CWE-573 at MITRE. All weaknesses

Ask an AI about CWE-573

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-573: Improper Following of Specification by Caller and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/573.html and https://cve.bz/cve/cwe/573?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.3CVE-2026-89087EPSS 0.3%

    The cstruct package before 6.3.0 for OCaml mishandles indexes.

  2. 6.5CVE-2026-59998EPSS 0.2%

    sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

  3. 9.3CVE-2026-41583EPSS 0.3%

    ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus rule that restricted the possible values of sighash hash types…

  4. 8.2CVE-2026-28498EPSS 0.2%

    Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OIDC) ID Tokens. Spe…

  5. 5.4CVE-2025-69287EPSS 0.3%

    The BSV Blockchain SDK is a unified TypeScript SDK for developing scalable apps on the BSV Blockchain. Prior to version 2.0.0, a cryptographic vulnerability in the TypeScript SDK's BRC-104 authentication implementation caused incorrect sig…

  6. 6.0CVE-2025-69202EPSS 0.3%

    Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor returns incorrect cached responses, leading to authorization by…

  7. 3.3CVE-2025-46330EPSS 0.2%

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the applicati…

  8. 8.7CVE-2025-21601EPSS 0.4%

    An Improper Following of Specification by Caller vulnerability in web management (J-Web, Captive Portal, 802.1X, Juniper Secure Connect (JSC) of Juniper Networks Junos OS on SRX Series, EX Series, MX240, MX480, MX960, QFX5120 Series, allow…

  9. 4.3CVE-2019-14829EPSS 0.8%

    A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in si…