Skip to content
OpenAdvisories

Weakness (CWE)

CWE-683: Function Call With Incorrect Order of Arguments

Variant Draft

The product calls a function, procedure, or routine, but the caller specifies the arguments in an incorrect order.

How to prevent it (1 mitigation)

  1. Implementation

    Use the function, procedure, or routine as specified.

Source: MITRE CWE-683

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-32269

    Parse Server OAuth2 adapter app ID validation sends wrong token to introspection endpoint

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.13 and 8.6.39, the OAuth2 authentication adapter does not correctly validate app IDs when appidField and appIds are configured. During…

    parse-community parse-server parse-server npm
  • Medium 5.5
    CVE-2026-24846

    malcontent's archive extraction could write outside extraction directory

    malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to version 1.20.3, malcontent could be made to create symlinks outside the intended extraction directory when scanning a speci…

    chainguard-dev malcontent github.com/chainguard-dev/malcontent Go
  • Medium 4.3
    CVE-2023-5352

    Awesome Support < 6.1.5 - Insufficient permission check in wpas_edit_reply

    The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the wpas_edit_reply function, allowing users to edit posts for which they do not have permission.

    Web / CMS