CWE-610 Externally Controlled Reference to a Resource in Another Sphere
Description
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-610 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-wjgm-6hv5-3cvf | CVE-2026-19032 | MODERATE |
jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution |
2026-09-28 | |
| GHSA-5qh3-hxx9-w26p | CVE-2026-57301 | HIGH |
Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE |
2026-09-25 | |
| GHSA-8359-h9fx-j6v9 | CVE-2026-55389 | HIGH |
datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs` |
2026-07-28 | |
| GHSA-442q-2j6p-642g | CVE-2026-55390 | HIGH |
datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate |
2026-07-28 | |
| GHSA-q8ch-jx67-q52x | CVE-2026-45760 | HIGH |
Apache Camel K: Kubernetes namespace authorized users can create a Build resource |
2026-06-23 | |
| GHSA-74j8-88mm-7496 | CVE-2020-8561 | MODERATE |
Confused Deputy in Kubernetes |
2026-06-09 | |
| GHSA-vw47-mr44-3jf9 | CVE-2021-25740 | LOW |
Confused Deputy in Kubernetes |
2026-06-09 | |
| GHSA-f43r-cc68-gpx4 | CVE-2025-68478 | HIGH |
External Control of File Name or Path in Langflow |
2026-06-06 | |
| GHSA-55cf-xx38-4p9p | CVE-2026-45003 | MODERATE |
OpenClaw: Workspace dotenv files cannot override connector endpoint hosts |
2026-05-19 | |
| GHSA-gqrq-j6pm-98c2 | CVE-2023-6569 | CRITICAL |
External Control of File Name or Path in h2oai/h2o-3 |
2026-04-15 | |
| GHSA-45cg-2683-gfmq | CVE-2026-32008 | MODERATE |
OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files |
2026-03-19 | |
| GHSA-5mqx-rpxv-mvxj | CVE-2024-6717 | HIGH |
HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration |
2026-02-04 | |
| GHSA-69p6-gp5x-j269 | CVE-2024-29069 | LOW |
snapd failed to properly check the destination of symbolic links when extracting a snap |
2024-11-18 | |
| GHSA-frxj-5j27-f8rf | CVE-2019-14905 | HIGH |
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible |
2024-11-18 | |
| GHSA-c866-8gpw-p3mv | CVE-2024-1329 | HIGH |
HashiCorp Nomad vulnerable to symlink attacks |
2024-09-26 | |
| GHSA-25qx-vfw2-fw8r | CVE-2024-7625 | MODERATE |
Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking |
2024-09-25 | |
| GHSA-hg58-rf2h-6rr7 | - | MODERATE |
CometBFT is unstability during blocksync when syncing from malicious peer |
2024-07-05 | |
| GHSA-mpwp-42x6-4wmx | CVE-2021-41244 | CRITICAL |
Grafana Fine-grained access control vulnerability |
2024-05-14 | |
| GHSA-f3h7-gpjj-wcvh | CVE-2024-32980 | CRITICAL | - |
Spin applications with specific configuration vulnerable to potential network sandbox escape |
2024-05-08 |
| GHSA-22gj-8qj2-fj46 | CVE-2023-30943 | MODERATE | - |
Moodle External Control of File Name or Path vulnerability |
2024-04-19 |
| GHSA-f3qr-qr4x-j273 | CVE-2024-25117 | MODERATE | - |
php-svg-lib lacks path validation on font through SVG inline styles |
2024-02-21 |
| GHSA-583g-g682-crxf | CVE-2024-23639 | MODERATE |
Micronaut management endpoints vulnerable to drive-by localhost attack |
2024-02-09 | |
| GHSA-ww6v-677g-p656 | CVE-2017-16088 | CRITICAL |
Sandbox Breakout in safe-eval |
2023-09-11 | |
| GHSA-hhpm-74pm-hf35 | CVE-2020-8553 | MODERATE |
ingress-nginx component for Kubernetes allows file overwrite |
2023-08-22 | |
| GHSA-6m27-7cqj-2mxw | CVE-2017-18357 | MODERATE | - |
Shopware XXE Vulnerability |
2023-07-26 |