Skip to content
OpenAdvisories

Weakness (CWE)

CWE-610: Externally Controlled Reference to a Resource in Another Sphere

Class Draft Mapping discouraged

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

Source: MITRE CWE-610

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.0
    CVE-2025-26417 Public exploit

    In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening fi…

    Google Android Android
  • Medium 6.5
    CVE-2023-30943 Public exploit

    Moodle: tinymce loaders susceptible to arbitrary folder creation

    The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.7
    CVE-2023-0045 Public exploit

    Incorrect indirect branch prediction barrier in the Linux Kernel

    The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update,…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 6.5
    CVE-2017-18357 Public exploit EPSS 27%

    Shopware XXE Vulnerability

    Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement object.

    shopware/shopware Packagist