CWE-472: Assumed-Immutable Parameter Tampering
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.
Also known as External Control of Assumed-Immutable Web Parameter.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeInteger overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local...5.0 Medium
- google chromeInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...9.6 Critical
- google chromeInteger overflow in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote...8.8 High
- google chromeInteger overflow in CredentialProvider in Google Chrome on Windows prior to 149.0.7827.53 allowed...7.5 High
- google chromeInteger overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Chromecast in Google Chrome prior to 149.0.7827.53 allowed a remote attacker...8.3 High
- google chromeInteger overflow in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who...8.3 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...6.5 Medium
- google chromeInteger overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...7.5 High
- google chromeInteger overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...8.3 High
- google chromeInteger overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote...8.3 High
- google chromeInteger overflow in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...7.5 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...4.3 Medium
- google chromeInteger overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who...7.5 High
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.12, redhat build of keycloak +2 moreKeycloak: keycloak: access token disclosure and implicit flow bypass via forged client data7.1 High
- google chromeInteger overflow in Fonts in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Codecs in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...8.3 High
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...4.3 Medium
- google chromeInteger overflow in Internationalization in Google Chrome on Windows prior to 148.0.7778.168...4.3 Medium
- google chromeInteger overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a...8.3 High
- google chromeInteger overflow in XML in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...8.8 High
- google chromeInteger overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote...7.5 High
- google chromeInteger overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeInteger overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who...4.3 Medium
- google chromeInteger overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...4.3 Medium
- google chromeInteger overflow in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote...4.2 Medium
- google chromeInteger overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 allowed a remote...8.8 High
- google chromeInteger overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- neorazorx facturascriptsFacturaScripts unauthorized modification of immutable nick field via EditUser controller5.3 Medium
- google chromeInteger overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote...4.3 Medium
- masaakitanaka booking packageBooking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter5.3 Medium
- ladela online scheduling and appointment booking system – booklyOnline Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'5.3 Medium
- google chromeInteger overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to...8.8 High
- Show moreLoading…