CWE-840: Business Logic Errors
Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.
From the CWE List. © The MITRE Corporation.
Newest
- chenyme grok2api chenyme grok2api STT Billing voice_ws_handler.go behavioral workflow 5.3 Medium
- omega solution restro pos Omega Solution Restro POS sale-invoice logic error 5.3 Medium
- nodejs node A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the... 3.7 Low
- subhajitkhan online-clinic-management-system subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow 5.3 Medium
- light0011 cms light0011 cms Vote VoteController.class.php logic error 6.9 Medium
- macrozheng mall macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error 5.3 Medium
- deepseek-ai deepseek-harness deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow 5.1 Medium
- macrozheng mall macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error 6.9 Medium
- newbee-ltd newbee-mall newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error 5.3 Medium
- nextcloud collectives The emoji field in the page emoji update endpoint does not properly validate user input. By... 2.4 Low
- nextcloud approval The Approval app's approve/reject endpoint is meant to require the file's current etag as a... 4.3 Medium
- hkuds ai-trader HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error 6.3 Medium
- macrozheng mall macrozheng mall Payment Status Endpoint paySuccess behavioral workflow 5.3 Medium
- macrozheng mall macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error 5.3 Medium
- webkul bagisto Webkul Bagisto store behavioral workflow 5.3 Medium
- webkul bagisto Webkul Bagisto RMA State Validation update-status behavioral workflow 5.3 Medium
- No product listed WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow 5.3 Medium
- No product listed WonderTrader TraderDD.cpp queryTrades behavioral workflow 6.3 Medium
- No product listed WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow 5.3 Medium
- huawei emui, harmony os +1 more Permission control vulnerability in the file system. Impact: Successful exploitation of this... 7.8 High
- code-projects simple food ordering system SourceCodester Simple Food Ordering System cart.php logic error 6.9 Medium
- huawei emui, harmonyos +1 more Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability... 5.9 Medium
- songquanpeng one-api songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error 2.3 Low
- sanluan publiccms Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error 6.9 Medium
- huawei harmonyos Permission control vulnerability in the manufacturability design module. Impact: Successful... 5.9 Medium
- huawei harmonyos Permission control vulnerability in the manufacturability design module. Impact: Successful... 5.9 Medium
- huawei harmonyos Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of... 5.6 Medium
- huawei harmonyos Permission control vulnerability in contacts. Impact: Successful exploitation of this... 5.9 Medium
- huawei harmonyos Permission control vulnerability in the security control module. Impact: Successful exploitation... 5.5 Medium
- huawei harmonyos Use-After-Free (UAF) vulnerability in the web. Impact: Successful exploitation of this... 5.6 Medium
- gitlab Business Logic Errors in GitLab 6.8 Medium
- ibm guardium data protection IBM Guardium Data Protection is affected by multiple vulnerabilities 4.9 Medium
- sourcecodester pharmacy product management system SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error 5.3 Medium
- sourcecodester online food ordering system SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error 5.3 Medium
- mickasmt next-saas-stripe-starter mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error 5.3 Medium
- huawei harmonyos Race condition vulnerability in the security control module. Impact: Successful exploitation of... 4.0 Medium
- bdtask bhojon, bhojon all-in-one restaurant management system +1 more Bdtask Bhojon All-In-One Restaurant Management System Add-to-Cart Submission Endpoint addtocart logic error 5.3 Medium
- bdtask bhojon, bhojon all-in-one restaurant management system +1 more Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error 5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 more Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users 6.5 Medium
- bdtask isshue, isshue multi store ecommerce shopping cart solution +1 more Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow 5.3 Medium
- gitlab Business Logic Errors in GitLab 2.7 Low
- huawei harmonyos Vulnerability of improper exception handling in the print module. Successful exploitation of this... 5.9 Medium
- gitlab Business Logic Errors in GitLab 3.5 Low
- linlinjava litemall linlinjava litemall Business Logic express logic error 5.3 Medium
- huawei emui, harmonyos +1 more EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation... 7.3 High
- huawei harmonyos Status verification vulnerability in the lock screen module. Impact: Successful exploitation of... 7.3 High
- gitlab Business Logic Errors in GitLab 3.1 Low
- code-projects atm banking code-projects ATM Banking moneyWithdraw logic error 4.8 Medium
- gitlab Business Logic Errors in GitLab 7.7 High
- pytorch pytorch/serve Unclaimed S3 Bucket Usage in pytorch/serve 6.3 Medium
- Show olderLoading…