CWE-706 - Use of Incorrectly-Resolved Name or Reference

Description

The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Latest vulnerabilities for CWE-706

Use of Incorrectly-Resolved Name or Reference in Nextcloud Server and Enterprise Server 2025-01-20
Medium Yes

Multiple vulnerabilities in Mastodon 2023-09-20
Medium Yes

Use of Incorrectly-Resolved Name or Reference in Nextcloud Server and Enterprise Server 2023-04-04
Medium Yes

Multiple vulnerabilities in libgit2 2020-04-27
Medium Yes

References

Description of CWE-706 on Mitre website