Weakness (CWE)
CWE-673: External Influence of Sphere Definition
The product does not prevent the definition of control spheres from external actors.
More detail
Typically, a product defines its control sphere within the code itself, or through configuration by the product's administrator. In some cases, an external party can change the definition of the control sphere.
Source: MITRE CWE-673
3 results · Feed
-
Low 2.2
In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the …
-
High 7.5
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
Apollo Federation is an architecture for declaratively composing APIs into a unified graph. Each team can own their slice of the graph independently, empowering them to deliver autonomously and incrementally. Instances of @apollo/query-planner >=2.0.0 and <2.…
-
High 7.5
dbt uses a SQLparse version with a high vulnerability
### Summary Using a version of `sqlparse` that has a security vulnerability and no way to update in current version of dbt core. Snyk recommends using `sqlparse==0.5` but this causes a conflict with dbt. Snyk states the issues is a recursion error: `SNYK-PYTH…