CWE-528: Exposure of Core Dump File to an Unauthorized Control Sphere

Variant

The product generates a core dump file in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.

Consequences

Confidentiality: Read Application Data, Read Files or Directories

How to prevent it

System Configuration: Protect the core dump files from unauthorized access.

Recent advisories

CVE-2025-48928 — The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password…

All advisories for CWE-528

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor