Skip to content
OpenAdvisories

Weakness (CWE)

CWE-913: Improper Control of Dynamically-Managed Code Resources

Class Incomplete

The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.

How to prevent it (2 mitigations)

  1. Implementation

    For any externally-influenced input, check the input against an allowlist of acceptable values.

  2. Implementation, Architecture and Design

    Refactor the code so that it does not need to be dynamically managed.

Source: MITRE CWE-913

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-46673 Public exploit

    NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a …

    nasa CryptoLib
  • Medium 6.4
    CVE-2022-40635 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

    Crafter Software Crafter CMS org.craftercms:craftercms Maven
  • Medium 6.4
    CVE-2022-40634 Public exploit

    Improper Control of Dynamically-Managed Code Resources in Crafter Studio

    Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.

    Crafter Software Crafter CMS org.craftercms:crafter-studio Maven