Skip to content
OpenAdvisories

Weakness (CWE)

CWE-351: Insufficient Type Distinction

Base Draft

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Source: MITRE CWE-351

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.6
    CVE-2025-32035

    DNN does not check the contents of a file when uploading files

    DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to 9.13.2, when uploading files (e.g. when uploading assets), the file extension is checked to see if it's an allowed file type but the actual …

    dnnsoftware Dnn.Platform
  • Low 3.7
    CVE-2025-22151

    Strawberry GraphQL has a type resolution vulnerability

    Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations (Django, SQLAlchemy, Pydantic).…

    strawberry-graphql strawberry strawberry-graphql PyPI