CWE-1025: Comparison Using Wrong Factors

Base

The code performs a comparison between two entities, but the comparison examines the wrong factors or characteristics of the entities, which can lead to incorrect results and resultant weaknesses.

Consequences

Other: Varies by Context

Recent advisories

GHSA-f5p5-6xmx-p252 — Keycloak vulnerable to authorization bypass via incorrect uri comparison
GHSA-xvj8-ph7x-65gf — Zebra: Cached Mempool Verification Bypasses Consensus Rules for Ahead-of-Tip Blocks
GHSA-76g3-38jv-wxh4 — tough timestamp metadata is cached when it fails snapshot rollback check
GHSA-q6r9-r9pw-4cf7 — tough failure to detect delegated target rollback
GHSA-92jh-gwch-jq38 — PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)

All advisories for CWE-1025

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor