Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1125: Excessive Attack Surface

Base Incomplete Mapping prohibited

The product has an attack surface whose quantitative
measurement exceeds a desirable maximum.

Source: MITRE CWE-1125

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2024-5386

    Account Hijacking via Password Reset Token Leak in lunary-ai/lunary

    In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijack another user's account by obtaining the password reset token. The vulnerabili…

    lunary-ai lunary-ai/lunary
  • Critical 9.8
    CVE-2022-2037

    Excessive Attack Surface in tooljet/tooljet

    Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.

    ToolJet tooljet/tooljet
  • Critical 9.8
    CVE-2022-1715

    Account Takeover in neorazorx/facturascripts

    Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.

    NeoRazorX neorazorx/facturascripts facturascripts/facturascripts Packagist