Common Weakness Enumeration
CWE-393 Return of Wrong Status Code
Description
A function or operation returns an incorrect return value or status code that does not indicate the true result of execution, causing the product to modify its behavior based on the incorrect result.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-393 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-vcgp-9326-pqcp | CVE-2026-42246 | HIGH |
net-imap vulnerable to STARTTLS stripping via invalid response timing |
2026-05-14 | |
| GHSA-9436-3gmp-4f53 | CVE-2023-37897 | HIGH | - |
grav Server-side Template Injection (SSTI) mitigation bypass |
2023-07-19 |