CWE-627: Dynamic Variable Evaluation
In a language where the user can influence the name of a variable at runtime, if the variable names are not controlled, an attacker can read or write to arbitrary variables, or access arbitrary functions.
Also known as Dynamic evaluation.
A kind of CWE-914 Improper Control of Dynamically-Identified Variables.
From the CWE List. © The MITRE Corporation.
Newest
- pretix, pretix newsletters, pretix-newsletter +2 more Unsafe variable evaluation in email templates 7.5 High
- pretix, pretix double opt in step, pretix-doistep +2 more Unsafe variable evaluation in email templates 7.5 High
- pretix Unsafe variable evaluation in email templates 7.5 High
-
flowisenpm Unintended dynamic code execution leads to remote code execution by network attackers 9.8 Critical - composio, composiohq composiohq/composio +1 more Unsafe eval usage in composiohq/composio 7.2 High
-
qiskit-ibm-runtimePyPI Dynamic Variable Evaluation in qiskit-ibm-runtime 2.8 Low - nvidia dgx a100, dgx a100 firmware +1 more CVE 7.5 High