Skip to content
Log inStart free trial

CWE-351: Insufficient Type Distinction

Base

The product does not properly distinguish between different types of elements in a way that leads to insecure behavior.

Consequences

  • Other: Other

Recent advisories

  • GHSA-6336-qqw9-v6x6 — OpenClaw: Discord Component Interaction Misclassifies Group DM as Direct Message
  • GHSA-98vj-mm79-v77r — Contao is vulnerable to remote code execution in template closures
  • GHSA-9hq9-cr36-4wpj — TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
  • CVE-2023-38831 — RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive.
  • GHSA-28ph-f7gx-fqj8 — Data races in rusqlite

All advisories for CWE-351

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor