CWE-610: Externally Controlled Reference to a Resource in Another Sphere, page 3
Filter
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
What the weakness is: CWE-610 at MITRE. OWASP Top 10: A05:2025 Injection
Related attack patterns (CAPEC): 1
- CAPEC-219 XML Routing Detour Attacks Likelihood: High · Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-610, as MITRE names them. Credits.
Ask an AI about CWE-610
Show the prompt
Explain CWE-610: Externally Controlled Reference to a Resource in Another Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/610.html and https://cve.bz/cve/cwe/610?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.5CVE-2023-49862EPSS 1.1%
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…
- 8.2CVE-2023-6569EPSS 0.7%
External Control of File Name or Path in h2oai/h2o-3
- 8.8CVE-2023-6618EPSS 0.9%
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page …
- 7.8CVE-2023-5247EPSS 0.3%
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a …
- 8.8CVE-2023-40194EPSS 2.0%
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace characters. A specially crafted malicious file can create files at arbitrary locations, w…
- 8.8CVE-2023-39542EPSS 3.8%
A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files, which can lead to remote code execution. An attacker needs to trick the user in…
- 8.8CVE-2023-35985EPSS 2.7%
An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitra…
- 7.1CVE-2023-34982EPSS 0.2%
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.
- 5.5CVE-2023-40139EPSS 0.09%
In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for ex…
- 2.7CVE-2023-4089EPSS 0.6%
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
- 7.8CVE-2023-44209EPSS 0.4%
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 29051, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build…
- 8.1CVE-2023-32615EPSS 0.8%
A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attac…
- 4.9CVE-2023-4704EPSS 0.9%
External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
- 7.8CVE-2022-46869EPSS 0.2%
Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis True Image OEM (Windows) before build 42575.
- 7.8CVE-2022-46868EPSS 0.2%
Local privilege escalation during recovery due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173.
- 5.7CVE-2023-35838EPSS 0.7%
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP…
- 4.3CVE-2023-37856EPSS 0.6%
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem through a configuration dialog within the embedded Qt browser .
- 4.3CVE-2023-37855EPSS 0.6%
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the device-filesystem within the embedded Qt browser.
- 4.9CVE-2023-38046EPSS 0.5%
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
- 8.1CVE-2023-3256EPSS 0.8%
Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.
- 5.5CVE-2023-33188EPSS 0.3%
Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths …
- 5.5CVE-2023-32076EPSS 0.2%
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directo…
- 4.4CVE-2023-0008EPSS 0.5%
A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition.
- 5.3CVE-2023-30943ExploitEPSS 6.8%
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the sy…
- 7.5CVE-2023-0045EPSS 2.4%
The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __spec…
- 7.8CVE-2023-21097EPSS 0.2%
In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
- 9.8CVE-2023-2152EPSS 1.2%
A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument…
- 7.8CVE-2023-22616EPSS 0.4%
An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does not check the value of a save state register before use. Due to insufficient input validat…
- 7.8CVE-2023-20964EPSS 0.1%
In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. This could lead to local denial of service or escalation of privilege with no additional execution privileges needed. User i…
- 6.5CVE-2023-0003EPSS 1.3%
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
- 7.5CVE-2022-43513EPSS 1.0%
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2). The affected components allow to rename…
- 9.8CVE-2014-125044EPSS 0.9%
A vulnerability, which was classified as critical, was found in soshtolsus wing-tight. This affects an unknown part of the file index.php. The manipulation of the argument p leads to file inclusion. It is possible to initiate the attack re…
- 7.8CVE-2022-34669EPSS 0.3%
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code executi…
- 6.5CVE-2022-3032EPSS 0.7%
When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were n…
- 7.8CVE-2022-20550EPSS 0.1%
In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exp…
- 5.5CVE-2022-20515EPSS 0.2%
In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local information disclosure with no additional execution priv…
- 5.5CVE-2022-20199EPSS 0.1%
In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f…
- 6.5CVE-2022-45918EPSS 1.3%
ILIAS before 7.16 allows External Control of File Name or Path.
- 7.5CVE-2022-42893EPSS 0.6%
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder acc…
- 7.5CVE-2022-42891EPSS 0.6%
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder acc…
- 7.5CVE-2022-42734EPSS 0.7%
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder acc…
- 7.5CVE-2022-42733EPSS 0.8%
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any f…
- 7.5CVE-2022-42732EPSS 0.7%
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any f…
- 7.8CVE-2022-44747EPSS 0.2%
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107.
- 5.3CVE-2022-43428EPSS 0.8%
Jenkins Compuware Topaz for Total Test Plugin 2.4.8 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain the values of Java system pro…
- 5.3CVE-2022-43423EPSS 0.7%
Jenkins Compuware Source Code Download for Endevor, PDS, and ISPW Plugin 2.0.12 and earlier implements an agent/controller message that does not limit where it can be executed, allowing attackers able to control agent processes to obtain t…
- 8.8CVE-2021-27406EPSS 1.2%
An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance wit…
- 9.9CVE-2022-39206EPSS 2.1%
Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker socket (e.g. /var/run/docker.sock on Linux) is mounted into each Docker step. Users that can define and trigger CI/CD…
- 9.1CVE-2022-27593KEVExploitEPSS 88%
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the fo…
- 8.2CVE-2022-2633ExploitEPSS 36%
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the ~/public/video.php file in versions up to, and including 2.6.0. This make…