CWE-1083 Data Access from Outside Expected Data Manager Component

base

The product is intended to manage data access through a particular data manager component such as a relational or non-SQL database, but it contains code that performs data access operations without using that component.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-2493UShigh8.1—
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan