CWE-1083: Data Access from Outside Expected Data Manager Component

The product is intended to manage data access through a particular data manager component such as a relational or non-SQL database, but it contains code that performs data access operations without using that component.

A kind of CWE-1061 Insufficient Encapsulation.

From the CWE List. © The MITRE Corporation.

Newest

• open-emr openemr, openemr openemr/openemr +1 more Data Access from Outside Expected Data Manager Component in openemr/openemr CVE-2022-2493 8.3 HighJuly 22, 2022