CWE-610— Externally Controlled Reference to a Resource in Another Sphere
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.— MITRE CWE catalog
272 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-610page 4 of 6
- CVE-2023-49864MEDIUMCVSS 6.5EG 6.52024-01-10
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…
- CVE-2023-49863MEDIUMCVSS 6.5EG 6.52024-01-10
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…
- CVE-2023-49862MEDIUMCVSS 6.5EG 6.52024-01-10
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerab…
- CVE-2023-32615MEDIUMCVSS 6.5EG 6.52023-09-05
A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attac…
- CVE-2023-30943MEDIUMCVSS 6.5EG 6.52023-05-02
The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the sy…
- CVE-2023-0003MEDIUMCVSS 6.5EG 6.52023-02-08
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.
- CVE-2022-3032MEDIUMCVSS 6.5EG 6.52022-12-22
When receiving an HTML email that contained an <code>iframe</code> element, which used a <code>srcdoc</code> attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were n…
- CVE-2022-45918MEDIUMCVSS 6.5EG 6.52022-12-07
ILIAS before 7.16 allows External Control of File Name or Path.
- CVE-2022-2638MEDIUMCVSS 6.5EG 6.52022-08-29
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This could allow high privilege users to delete arbitrary file from the server
- CVE-2022-32761MEDIUMCVSS 6.5EG 6.52022-08-22
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTT…
- CVE-2022-28710MEDIUMCVSS 6.5EG 6.52022-08-22
An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to tri…
- CVE-2022-30245MEDIUMCVSS 6.5EG 6.52022-07-15
Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted p…
- CVE-2021-3779MEDIUMCVSS 6.5EG 6.52022-06-28
A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later.
- CVE-2020-21363MEDIUMCVSS 6.5EG 6.52021-08-11
An arbitrary file deletion vulnerability exists within Maccms10.
- CVE-2021-26920MEDIUMCVSS 6.5EG 6.52021-07-02
In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with…
- CVE-2018-12475MEDIUMCVSS 6.5EG 6.52020-09-01
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially down…
- CVE-2020-5412MEDIUMCVSS 6.5EG 6.52020-08-07
Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server…
- CVE-2019-3996MEDIUMCVSS 6.5EG 6.52019-12-17
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.
- CVE-2017-18357MEDIUMCVSS 6.5EG 6.52019-01-15
Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the Shopware_Controllers_Backend_ProductStream controller, with resultant XXE via instantiation of a SimpleXMLElement ob…
- CVE-2022-20789MEDIUMCVSS 4.9EG 6.52022-04-21
A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to writ…
- CVE-2024-8207MEDIUMCVSS 6.4EG 6.42024-08-27
In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load uni…
- CVE-2026-12788MEDIUMCVSS 6.3EG 6.32026-06-21
A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /adpweb/a/base/barcodeDetail/import of the co…
- CVE-2026-2536MEDIUMCVSS 6.3EG 6.32026-02-16
A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the component Workflow Engine. This manipulation of the argument File c…
- CVE-2026-2074MEDIUMCVSS 6.3EG 6.32026-02-07
A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP POST Request Handler. The manipulation leads to xml external entity reference. It…
- CVE-2026-1218MEDIUMCVSS 6.3EG 6.32026-01-20
A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0. Impacted is the function initRCForm of the file RichClientService.class of the component com.artery.richclient.RichClientService. Performing a manipulation results in xml extern…
- CVE-2025-13209MEDIUMCVSS 6.3EG 6.32025-11-15
A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. This manipulation…
- CVE-2025-3241MEDIUMCVSS 6.3EG 6.32025-04-04
A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an unknown part of the file src/main/java/com/ukefu/webim/web/handler/admin/callcenter/CallCenterRouterController.java of t…
- CVE-2025-2365MEDIUMCVSS 6.3EG 6.32025-03-17
A vulnerability, which was classified as problematic, has been found in crmeb_java up to 1.3.4. Affected by this issue is the function webHook of the file WeChatMessageController.java. The manipulation leads to xml external entity referenc…
- CVE-2025-1225MEDIUMCVSS 6.3EG 6.32025-02-12
A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interf…
- CVE-2024-7911MEDIUMCVSS 6.3EG 6.32024-08-18
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /simple-online-bidding-system/bidding/index.php. The manipulation of the argument pa…
- CVE-2023-33188MEDIUMCVSS 6.3EG 6.32023-05-27
Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths …
- CVE-2021-36190MEDIUMCVSS 5.5EG 6.32021-12-08
A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to access protected hosts via crafted HTTP requests.
- CVE-2026-68562MEDIUMCVSS 6.2EG 6.22026-07-30
A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When an operator runs a specific remediation task, this manipulated report can cause …
- CVE-2020-5296MEDIUMCVSS 6.2EG 6.22020-06-03
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to delete arbitrary local files of an October CMS server. The vulnerability is only exploitable by an aut…
- CVE-2021-32773MEDIUMCVSS 6.1EG 6.12021-07-20
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules i…
- CVE-2026-12879MEDIUMCVSS 5.9EG 5.92026-07-09
An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 1…
- CVE-2024-24818MEDIUMCVSS 5.9EG 5.92024-03-21
EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victim to malicious page that could lead to credential stealing or another attack. T…
- CVE-2020-8553MEDIUMCVSS 5.9EG 5.92020-07-29
The Kubernetes ingress-nginx component prior to version 0.28.0 allows a user with the ability to create namespaces and to read and create ingress objects to overwrite the password file of another ingress which uses nginx.ingress.kubernetes…
- CVE-2024-7625MEDIUMCVSS 5.8EG 5.82024-08-15
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive hea…
- CVE-2020-8226MEDIUMCVSS 5.8EG 5.82020-08-17
A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.
- CVE-2026-30817MEDIUMCVSS 5.7EG 5.72026-04-08
An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files when a malicious configuration file is processed. Successful exploitation may a…
- CVE-2026-30816MEDIUMCVSS 5.7EG 5.72026-04-08
An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation ma…
- CVE-2023-35838MEDIUMCVSS 5.7EG 5.72023-08-09
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP…
- CVE-2025-15251MEDIUMCVSS 5.6EG 5.62025-12-30
A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Messa…
- CVE-2019-14905MEDIUMCVSS 5.6EG 5.62020-03-31
A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used to copy files to a flash or bootflash on NXOS devices. Malic…
- CVE-2024-49728MEDIUMCVSS 5.5EG 5.52025-09-02
In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interactio…
- CVE-2024-49722MEDIUMCVSS 5.5EG 5.52025-09-02
In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is no…
- CVE-2025-0082MEDIUMCVSS 5.5EG 5.52025-08-26
In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges n…
- CVE-2023-35668MEDIUMCVSS 5.5EG 5.52023-12-04
In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is no…
- CVE-2023-34982MEDIUMCVSS 5.5EG 5.52023-11-15
This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.…
Map vulnerabilities like CWE-610 to your infrastructure
EchelonGraph correlates every CVE — across CWE-610 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →