Skip to content
OpenAdvisories

Weakness (CWE)

CWE-205: Observable Behavioral Discrepancy

Base Incomplete

The product's behaviors indicate important differences that may be observed by unauthorized actors in a way that reveals (1) its internal state or decision process, or (2) differences from other products with equivalent functionality.

How to prevent it (1 mitigation)

  1. Implementation

    Ideally, a product should provide as little information about its internal operations as possible.

Source: MITRE CWE-205

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2024-6129

    spa-cartcms Username login observable behavioral discrepancy

    A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Username Handler. The manipulation of the argument email leads to observable behavioral discrepancy. It…