Skip to content

CWE-673: External Influence of Sphere Definition

Class

The product does not prevent the definition of control spheres from external actors.

Typically, a product defines its control sphere within the code itself, or through configuration by the product's administrator. In some cases, an external party can change the definition of the control sphere. This is typically a resultant weakness.

Consequences

  • Other: Other

Recent advisories

  • GHSA-fmj9-77q8-g6c4 — Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries

All advisories for CWE-673

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor