CWE-840: Business Logic Errors
Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.
From the CWE List. © The MITRE Corporation.
Newest
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 Medium
- haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...5.3 Medium
- nextcloud preferred providers, opensuse backports sle, leap +2 moreA missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password...5.3 Medium
- nextcloud contactsA missing file type check in Nextcloud Contacts 3.2.0 allowed a malicious user to upload any file...4.3 Medium
- yarnpkg yarnTOCTOU Race Condition in Yarn5.9 Medium
- cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 moreUAA defaults email address to an insecure domain8.3 High
- cloudfoundry routing release, cloud foundry cf routing +1 moreGorouter allows space developer to hijack route services hosted outside the platform8.8 High