Skip to content
OpenAdvisories

Weakness (CWE)

CWE-437: Incomplete Model of Endpoint Features

Base Incomplete

A product acts as an intermediary or monitor between two or more endpoints, but it does not have a complete model of an endpoint's features, behaviors, or state, potentially causing the product to perform incorrect actions based on this incomplete model.

Source: MITRE CWE-437

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2022-29254

    Failed payment recorded has completed in silverstripe/silverstripe-omnipay

    silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is po…

    silverstripe silverstripe-omnipay silverstripe/silverstripe-omnipay Packagist