CWEweakness
CWE-344 Use of Invariant Value in Dynamically Changing Context
- Abstraction
- Base
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product uses a constant value, name, or reference, but this value can (or should) vary across different environments.
Common consequences
• Other: Varies by Context
Observed examples
• CVE-2002-0980: Component for web browser writes an error message to a known location, which can then be referenced by attackers to process HTML/script in a less restrictive context
Related
Observed example · CVE (1)
- CVE-2002-0980 The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which… vulnerability
Child of · CWE (1)
- CWE-330 Use of Insufficiently Random Values weakness
Referenced by CVE · weakness (3)
- CVE-2026-42961 ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. vulnerability
- CVE-2023-22746 CKAN is an open-source DMS (data management system) for powering data hubs and data portals. vulnerability
- CVE-2022-36022 Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. vulnerability