Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1125: Excessive Attack Surface

Base Incomplete Mapping prohibited

The product has an attack surface whose quantitative
measurement exceeds a desirable maximum.

Source: MITRE CWE-1125

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Critical 9.6
    CVE-2024-5386

    Account Hijacking via Password Reset Token Leak in lunary-ai/lunary

    In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijack another user's account by obtaining the password reset token. The vulnerabili…

    lunary-ai lunary-ai/lunary
  • High 8.3
    CVE-2023-49722

    Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the devi…

    Bosch BCC101 BCC50 BCC102
  • Medium 4.0
    CVE-2023-0435

    Excessive Attack Surface in pyload/pyload

    Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.

    pyload pyload/pyload pyload-ng PyPI
  • Critical 9.8
    CVE-2022-2037

    Excessive Attack Surface in tooljet/tooljet

    Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.

    ToolJet tooljet/tooljet
  • Critical 9.8
    CVE-2022-1715

    Account Takeover in neorazorx/facturascripts

    Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.

    NeoRazorX neorazorx/facturascripts facturascripts/facturascripts Packagist