Skip to content
OpenAdvisories

Weakness (CWE)

CWE-482: Comparing instead of Assigning

Variant Draft

The code uses an operator for comparison when the intention was to perform an assignment.

How to prevent it (1 mitigation)
  1. Testing

    Many IDEs and static analysis products will detect this problem.

Source: MITRE CWE-482

2 results · Feed

  • Critical 9.1

    Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection

    Froxlor is open source server administration software. Prior to 2.3.4, a typo in Froxlor's input validation code (== instead of =) completely disables email format checking for all settings fields declared as email type. This allows an authenticated admin to …

  • High 8.8

    An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code…