CWE-1125 Excessive Attack Surface
baseThe product has an attack surface whose quantitative measurement exceeds a desirable maximum.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (7)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0435US | critical9.8 | — | ||
Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41. | ||||
| CVE-2022-1715US | critical9.8 | — | ||
Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07. | ||||
| CVE-2024-5386US | high8.8 | — | ||
In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer' role can exploit this vulnerability to hijac… | ||||
| CVE-2022-2037US | high8.0 | — | ||
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0. | ||||
| CVE-2023-49722US | medium6.5 | — | ||
Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network. | ||||
| CVE-2026-58586US | —OT elevated | — | ||
Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp.
Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan