Common Weakness Enumeration

CWE-914 Improper Control of Dynamically-Identified Variables

Description

The product does not properly restrict reading from or writing to dynamically-identified variables.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-914 ordered by modification date.

1 reviewed records
Advisory ID NVD ID Severity PURLs Summary Last Modified
GHSA-hh7j-pg39-q563 CVE-2023-33175 CRITICAL

toui allows user-specific variables to be shared between users

2023-05-30