CWE-348: Use of Less Trusted Source
The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- florent maillefaud wp maintenance, wp maintenance project maintenance +1 moreWP Maintenance <= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass5.3 Medium
- fortinet fortiportalA Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0...7.1 High
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source8.8 High
- ibm aspera faspexIBM Aspera Faspex security bypass5.3 Medium
- icewhale casaos, casaos-gateway +1 moreIncorrect identification of source IP addresses in CasaOS9.8 Critical
- brizy, themefusecom brizy – page builder +1 moreBrizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass3.7 Low
- wpplugins hide my wp ghost, johndarrel wp ghost (hide my wp ghost) – security & firewall +1 moreHide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass6.5 Medium
- mod wsgi wsgi, debian linux, modwsgi mod wsgi +2 moreIncorrect header handling in mod-wsgi7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Critical
- nim-lang nim, embysupport security +1 moreNimble falls back to insecure http url when fetching packages7.5 High
- nim-lang nim, embysupport security +1 moreNimble fails to validate certificates due to insecure httpClient defaults8.1 High