CWE-610 · Externally Controlled Reference to a Resource in Another Sphere

239 CVEs classified under CWE-610 (Externally Controlled Reference to a Resource in Another Sphere). Browse by severity and year.

Top CVEs for CWE-610
CVESeverityScorePublishedSummary
CVE-2022-27593Critical10.02022-09-08An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an at…
CVE-2019-7290Critical10.02019-12-18An access issue was addressed with additional sandbox restrictions. This issue is fixed in Shortcuts 2.1.3 for iOS. A sandboxed process may be able to circumve…
CVE-2017-16088Critical10.02018-06-07The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard…
CVE-2022-39206Critical9.92022-09-13Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. When using Docker-based job executors, the Docker socket (e.g. /var/run/docker.sock on…
CVE-2026-47643Critical9.82026-06-09External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
CVE-2025-22144Critical9.82025-01-13NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can vali…
CVE-2022-20239Critical9.82022-08-10remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can also be controlled by u…
CVE-2021-44041Critical9.82021-12-14UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-a…
CVE-2021-43685Critical9.82021-12-01libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php…
CVE-2020-14057Critical9.82020-07-01Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allow…
CVE-2020-9752Critical9.82020-03-23Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe.
CVE-2026-30903Critical9.62026-03-11External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation…
CVE-2024-5823Critical9.12024-10-29A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to…
CVE-2024-32980Critical9.12024-05-08Spin is the developer tool for building and running serverless applications powered by WebAssembly. Prior to 2.4.3, some specifically configured Spin applicati…
CVE-2021-41244Critical9.12021-11-15Grafana is an open-source platform for monitoring and observability. In affected versions when the fine-grained access control beta feature is enabled and ther…
CVE-2021-27648Critical9.02021-04-28Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote aut…
CVE-2024-42168High8.92025-01-11HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that returns malicious content, and then ind…
CVE-2026-57301High8.82026-06-24Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Con…
CVE-2026-40370High8.82026-05-12External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-0522High8.82026-04-01A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the…
All CVEs classified under CWE-610 — newest first (page 1 of 3)
CVESeverityScorePublishedSummary
CVE-2026-68562Medium6.22026-07-30A flaw was found in ansible-collection-redhat-leapp. An attacker with privileged write access to a managed node's Leapp report content can manipulate it. When…
CVE-2026-55390High7.52026-07-28datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.62.0, XML Schema parsing in src/datamodel_code_generator/par…
CVE-2026-55389High7.52026-07-28datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw J…
CVE-2026-15583High8.62026-07-15A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-accoun…
CVE-2026-128792026-07-09An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated…
CVE-2026-10816High7.52026-06-30Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is ena…
CVE-2026-57301High8.82026-06-24Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Con…
CVE-2026-12788Medium6.32026-06-21A vulnerability was determined in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This vulnerability affects unknown code of the file /…
CVE-2026-47643Critical9.82026-06-09External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
CVE-2026-0418Medium4.52026-06-09Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
CVE-2026-45760High8.12026-05-21(Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K. Authoriz…
CVE-2026-47358High7.52026-05-19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server m…
CVE-2026-47357High7.52026-05-19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{…
CVE-2026-30905High7.82026-05-13External Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal Installer before version 6.6.11 may allow an authenticated user to con…
CVE-2026-41107High7.42026-05-12External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVE-2026-40370High8.82026-05-12External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-32204High7.82026-05-12External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-34327High8.22026-05-07Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-30817Medium5.72026-04-08An external configuration control vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary files wh…
CVE-2026-30816Medium5.72026-04-08An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file…
CVE-2026-0522High8.82026-04-01A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the…
CVE-2026-32008Medium6.52026-03-19OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authe…
CVE-2026-30903Critical9.62026-03-11External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation…
CVE-2026-28722High7.32026-03-06Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2026-28721High7.32026-03-06Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.
CVE-2025-48654High7.82026-03-02In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of…
CVE-2026-3404Medium5.02026-03-02A flaw has been found in thinkgem JeeSite up to 5.15.1. Impacted is an unknown function of the file /com/jeesite/common/shiro/cas/CasOutHandler.java of the com…
CVE-2026-2536Medium6.32026-02-16A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow…
CVE-2026-2074Medium6.32026-02-07A vulnerability was identified in O2OA up to 9.0.0. This impacts an unknown function of the file /x_program_center/jaxrs/mpweixin/check of the component HTTP P…
CVE-2026-1218Medium6.32026-01-20A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0. Impacted is the function initRCForm of the file RichClientService.class of the component com.arte…
CVE-2025-15251Medium5.62025-12-30A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/jav…
CVE-2025-68478High7.12025-12-19Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's…
CVE-2025-48598Medium6.62025-12-08In multiple locations, there is a possible way to alter the primary user's face unlock settings due to a confused deputy. This could lead to physical escalatio…
CVE-2025-13209Medium6.32025-11-15A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\jav…
CVE-2025-11341High7.32025-10-06A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=S…
CVE-2025-11140High7.32025-09-29A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm of the component com.artery.richclient…
CVE-2025-11035Medium6.32025-09-26A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=Ge…
CVE-2025-10816High7.32025-09-22A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/ToolBar/GetWordFileName.aspx/?text=GetUrl&…
CVE-2025-8057Medium6.52025-09-16Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Pati…
CVE-2025-9065High8.82025-09-09A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attac…
CVE-2025-10092High7.32025-09-08A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add o…
CVE-2025-10091High7.32025-09-08A vulnerability has been found in Jinher OA up to 1.2. This affects an unknown function of the file /c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx/?Ty…
CVE-2024-49728Medium5.52025-09-02In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy. This could lead to local inform…
CVE-2024-49722Medium5.52025-09-02In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information d…
CVE-2025-48963High7.32025-08-28Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) b…
CVE-2025-26417Medium4.02025-08-26In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused…
CVE-2025-0082Medium5.52025-08-26In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This coul…
CVE-2015-101422025-07-25Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev. 141212) and Content Management System (CMS) prior to 7.2 Update-3 (rev. 141226) and prior…
CVE-2025-7824High7.32025-07-19A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing of the file XmlHttp.aspx. The manipula…
CVE-2025-7823High7.32025-07-19A vulnerability was found in Jinher OA 1.2. It has been declared as problematic. This vulnerability affects unknown code of the file ProjectScheduleDelete.aspx…
CVE-2025-7523High7.32025-07-13A vulnerability was found in Jinher OA 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /c6/Jhsoft.Web.messa…
CVE-2025-6691High8.12025-07-09The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation…
CVE-2025-5877Medium6.32025-06-09A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this issue is some unknown functionality of…
CVE-2025-2875High7.52025-05-14CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticate…
CVE-2025-26684Medium6.72025-05-13External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVE-2024-131772025-04-15Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”. A st…
CVE-2025-3241Medium6.32025-04-04A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an unknown part of the file src/main/java/c…
CVE-2025-2365Medium6.32025-03-17A vulnerability, which was classified as problematic, has been found in crmeb_java up to 1.3.4. Affected by this issue is the function webHook of the file WeCh…
CVE-2024-51961High7.52025-03-03There is a local file inclusion vulnerability in ArcGIS Server 11.3 and below that may allow a remote, unauthenticated attacker to craft a URL that could poten…
CVE-2025-0111Medium6.52025-02-12An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web…
CVE-2025-1225Medium6.32025-02-12A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/m…
CVE-2022-23439Medium4.72025-01-22A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, wh…
CVE-2025-22144Critical9.82025-01-13NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can vali…
CVE-2024-42168High8.92025-01-11HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that returns malicious content, and then ind…
CVE-2024-52792Medium6.52024-12-17LDAP Account Manager (LAM) is a php webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In affected versions LAM…
CVE-2024-10979High8.82024-11-14Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. P…
CVE-2024-5823Critical9.12024-10-29A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to…
CVE-2024-47773High8.22024-10-08Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache is poisoned with a response without an…
CVE-2024-45826Medium6.82024-09-12CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a craft…
CVE-2024-8207Medium6.42024-08-27In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a uninte…
CVE-2024-7911Medium6.32024-08-18A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /sim…
CVE-2024-7625Medium5.82024-08-15In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocatio…
CVE-2024-60792024-08-13A vulnerability exists in the Rockwell Automation Emulate3D™, which could be leveraged to execute a DLL Hijacking attack. The application loads shared librarie…
CVE-2024-28962Medium6.52024-08-06Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthen…
CVE-2024-29069Medium4.82024-07-25In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-s…
CVE-2024-6717High7.72024-07-23HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation director…
CVE-2024-31319High7.82024-07-09In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This…
CVE-2024-38049Medium6.62024-07-09Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
CVE-2024-28826High8.82024-05-29Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 (EOL) allows attacker…
CVE-2024-32980Critical9.12024-05-08Spin is the developer tool for building and running serverless applications powered by WebAssembly. Prior to 2.4.3, some specifically configured Spin applicati…
CVE-2023-6154High7.82024-04-01A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender An…
CVE-2024-24818Medium5.92024-03-21EspoCRM is an Open Source Customer Relationship Management software. An attacker can inject arbitrary IP or domain in "Password Change" page and redirect victi…
CVE-2024-25117Medium6.82024-02-21php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't…
CVE-2024-23639Medium5.12024-02-09Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Ko…
CVE-2024-1329High7.72024-02-08HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user…
CVE-2024-24760High8.82024-02-02mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability has been identified in mailcow affectin…
CVE-2020-36772Medium4.42024-01-22CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitr…
CVE-2024-0728Medium4.72024-01-19A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channe…
CVE-2023-49864Medium6.52024-01-10An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb…
CVE-2023-49863Medium6.52024-01-10An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb…
CVE-2023-49862Medium6.52024-01-10An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb…
CVE-2023-6569High8.22023-12-14External Control of File Name or Path in h2oai/h2o-3
CVE-2023-6618Medium5.52023-12-08A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unk…
CVE-2023-5247High7.82023-11-30Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a m…
CVE-2023-40194High8.82023-11-27An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace character…
CVE-2023-39542High8.82023-11-27A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files…
CVE-2023-35985High8.82023-11-27An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dan…
CVE-2023-34982Medium5.52023-11-15 This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on…
CVE-2023-40139Medium5.52023-10-27In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with…
CVE-2023-4089Low2.72023-10-17On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local fi…