CWE-470: Reflection Injection
The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.
Also known as Use of Externally-Controlled Input to Select Classes or Code, Unsafe Reflection.
A kind of CWE-913 Improper Control of Dynamically-Managed Code Resources.
From the CWE List. © The MITRE Corporation.
Newest
- openidentityplatform openam OpenAM before 16.1.4 Insufficient Response Validation in Internal SOAP Channel 6.1 Medium
- apache software foundation axis 1.x (eol) Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName No score
- apache software foundation ofbiz Apache OFBiz: Content renderer runs a service name stored on the row No score
- apache software foundation juneau Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing 10.0 Critical
- aws amazon-redshift-jdbc-driver Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters 9.2 Critical
- avaya system manager CVE-2026-16306 9.8 Critical
- project-monai monai MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json() 8.5 High
- agno Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection 9.2 Critical
- mlflow MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules 9.8 Critical
- gitroomhq postiz-app Arbitrary file read and backend crash through unrestricted provider method calls 9.9 Critical
- mlflow MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints 6.5 Medium
- hydra-ecosystem hydra-ray-launcher hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import 4.8 Medium
- wproyal royal elementor addons WordPress Royal Elementor Addons plugin <= 1.7.1068 - Arbitrary Code Execution vulnerability 7.6 High
- getgrav grav Grav 2.0.0 before 2.2.5 Unauthorized Page Deletion via Flex Form Directives 7.0 High
- flarum framework Laravel relationship inclusion can trigger unauthorized data destruction 6.5 Medium
- crewai CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability 8.8 High
- speaches-ai speaches speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code 6.9 Medium
- apache software foundation johnzon Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON 9.8 Critical
- opengauss-server opengauss-connector-jdbc JDBC LogFactory 任意类加载/构造导致潜在 RCE 7.0 High
- unslothai unsloth unslothai unsloth sentence_transformer.py externally-controlled input to select classes or code 5.3 Medium
- sonatype nexus repository 3 Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint 6.9 Medium
- drupal entity list Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218 8.1 High
- drupal core Drupal core - Critical - Remote code execution - SA-CORE-2026-014 8.1 High
- grid protection alliance openhistorian, openpdc, openpdc (docker image) +2 more Grid Protection Alliance openPDC and openHistorian Use of Externally-Controlled Input to Select Classes or Code 7.7 High
- apache jackrabbit Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies 6.9 Medium
- @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml 7.7 High
- hydra-ecosystem hydra Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method 7.8 High
- hydra-ecosystem hydra Hydra: Mutable instantiate policy sets allow target blocklist bypass 8.5 High
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 more WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability 6.5 Medium
-
libyaml-perlDebian,perl-YAMLAlmaLinux +1 more YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes 9.1 Critical - accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway unsafe reflection 7.2 High
- moodle Moodle: arbitrary class instantiation via report builder audience classname 2.2 Low
- aws gluonts GluonTS arbitrary command execution during model deserialization 8.4 High
- red hat streams for apache kafka 2, streams for apache kafka 3, streamshub console for apache kafka® +2 more Streamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providers 6.5 Medium
- red hat amq broker 7, jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25 +2 more Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization 8.2 High
- frappe erpnext Frappe ERPNext before 16.34.1 Unauthorized Method Invocation 5.3 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 more IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities 7.6 High
- apache software foundation calcite avatica Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins 8.8 High
- mongodb mongoid Data deletion and attribute disclosure via field-name method injection in in-memory queries 9.2 Critical
- mongodb mongoid Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation 8.3 High
- ibm mq IBM MQ queue manager is vulnerable to remote code execution 7.5 High
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 more Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally... 7.3 High
- djust-org djust djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path 8.8 High
- zopefoundation restrictedpython RestrictedPython: Sandbox escape via string.Formatter field resolution 8.4 High
- jenkins script security, jenkins project script security plugin +1 more Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder... 8.5 High
- apache apache-airflow-providers-apache-kafka, apache software foundation airflow apache kafka provider +1 more Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration 8.8 High
-
libdbi-perlDebian,perl-dbiAlpaquita +1 more DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM 9.8 Critical - craftcms cms Low-privilege RCE through element-search eager loading 8.7 High
- apache nutch Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API) 9.8 Critical
- apache nutch Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API) 8.8 High
- Show olderLoading…