Common Weakness Enumeration
CWE-642 External Control of Critical State Data
Description
The product stores security-critical state information about its users, or the product itself, in a location that is accessible to unauthorized actors.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-642 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-rvqr-hrcc-j9vv | CVE-2026-35659 | MODERATE |
OpenClaw: Bonjour/DNS-SD TXT metadata steers CLI routing after failed service resolution |
2026-04-10 | |
| GHSA-97f8-h76h-f297 | - | LOW | - |
Duplicate Advisory: Unauthenticated Nonce Increment in snow |
2025-07-28 |
| GHSA-fx46-whrj-73v5 | CVE-2017-0928 | MODERATE |
Bypassing Sanitization using DOM clobbering in html-janitor |
2023-09-12 |