Skip to content
OpenAdvisories

Weakness (CWE)

CWE-610: Externally Controlled Reference to a Resource in Another Sphere

Class Draft Mapping discouraged

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

Source: MITRE CWE-610

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.6
    CVE-2026-15583 Public exploit

    SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header

    A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrar…

    Grafana Grafana MCP Server Web / CMS
  • Medium 4.0
    CVE-2025-26417 Public exploit

    In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening fi…

    Google Android Android
  • High 8.2
    CVE-2024-47773 Public exploit

    Anonymous cache poisoning via XHR requests in Discourse

    Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without any preloaded data. This issue only affects anonymous visitors of the site. This problem has been patc…

    Discourse Discourse
  • High 8.8
    CVE-2024-24760 Public exploit

    Mailcow Docker Container Exposure to Local Network

    mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailcow affecting versions < 2024-01c. This vulnerability potentially allows attackers on the same subnet to connect…

    mailcow mailcow-dockerized
  • Medium 6.5
    CVE-2023-30943 Public exploit

    Moodle: tinymce loaders susceptible to arbitrary folder creation

    The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.7
    CVE-2023-0045 Public exploit

    Incorrect indirect branch prediction barrier in the Linux Kernel

    The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update,…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2023-21097 Public exploit

    In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This co…

    Android
  • Medium 6.5
    CVE-2017-18357 Public exploit EPSS 27%

    Shopware XXE Vulnerability

    Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.

    shopware/shopware Packagist
  • Critical 10.0
    CVE-2017-16088 Public exploit

    Sandbox Breakout in safe-eval

    The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.

    HackerOne safe-eval node module safe-eval npm