Common Weakness Enumeration

CWE-408 Incorrect Behavior Order: Early Amplification

Description

The product allows an entity to perform a legitimate but expensive operation before authentication or authorization has taken place.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-408 ordered by modification date.

4 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-p464-m8x6-vhv8 CVE-2026-41405 HIGH
npm/openclaw

OpenClaw: MS Teams webhook parses body before JWT validation, enabling unauthenticated resource exhaustion

 2026-05-06
GHSA-hhff-fj5f-qg48 CVE-2026-41374 MODERATE
npm/openclaw

OpenClaw runs Discord audio preflight transcription before member authorization

 2026-05-06
GHSA-m6fx-m8hc-572m CVE-2026-41331 MODERATE
npm/openclaw

OpenClaw: Telegram audio preflight transcription enables resource consumption by unauthorized senders

 2026-04-24
GHSA-qq3j-44gw-cf6r CVE-2022-2576 HIGH
maven/org.eclipse.californium/californium-core

Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch

 2022-08-10