CWEweakness

CWE-1125 Excessive Attack Surface

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product has an attack surface whose quantitative measurement exceeds a desirable maximum.

Common consequences

• Other: Varies by Context

Related

Child of · CWE (1)

  • CWE-1120 Excessive Code Complexity weakness

Referenced by CVE · weakness (5)

  • CVE-2024-5386 In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. vulnerability
  • CVE-2023-49722 Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi… vulnerability
  • CVE-2023-0435 Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41. vulnerability
  • CVE-2022-2037 Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0. vulnerability
  • CVE-2022-1715 Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07. vulnerability

Referenced by OWASP · mapped cwe (1)