CWE-610.

Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass

• Stirling-Tools Stirling-PDF
• Path traversal
• Server-side request forgery (SSRF)

HCL BigFix AEX is affected by multiple security vulnerabilities.

• HCL Software BigFix AEX
• Server-side request forgery (SSRF)
• CWE-441

Google Chrome: Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57…

• Google Chrome
• CWE-610

jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution

• Code injection
• CWE-610

>=2.8.0, <2.18.10 || >=2.19.0, <2.21.6 || >=2.22.0, <2.22.2 · fixed in 2.18.10, 2.21.6, 2.22.2

Confused Deputy in Application Integration allows Internal File Read

• Google Cloud Application Integration
• CWE-610

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

• HCLSoftware BigFix Quantum Risk Analyzer
• CWE-494
• CWE-610

Google Chrome: Externally controlled reference in WebView in Google Chrome on on Android prior to…

• Google Chrome
• CWE-610

Google Chrome: Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a…

• Google Chrome
• CWE-610

Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

• git
• Information disclosure
• CWE-610

pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference

• pkp-lib
• XML external entities (XXE)
• CWE-610

Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tampering

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-610

datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`

• Path traversal
• Information disclosure

<0.62.0 · fixed in 0.62.0

datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate

• Path traversal
• Information disclosure

>=0.59.0, <0.62.0 · fixed in 0.62.0

SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header

• Grafana MCP Server
• CWE-610

Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy

• Google Cloud Apigee
• CWE-441
• CWE-610

Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE

• CWE-610

<=1.0.7 · no fixed version yet

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity reference

• zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台
• XML external entities (XXE)
• CWE-610

Apache Camel K: Kubernetes namespace authorized users can create a Build resource

• Broken access control
• CWE-610

<2.8.1 || >=2.9.0, <2.9.2 || >=2.10.0, <2.10.1 · fixed in 2.8.1, 2.9.2, 2.10.1

Server-side request forgery in tenable Terrascan

• tenable Terrascan
• Path traversal
• Server-side request forgery (SSRF)

Server-side request forgery in tenable Terrascan

• tenable Terrascan
• Path traversal
• Server-side request forgery (SSRF)

Microsoft Partner Center Spoofing Vulnerability

• Microsoft Partner Center
• CWE-610

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

• CWE-427
• CWE-441

<2026.4.22 · fixed in 2026.4.22

Local File Inclusion in the File Upload/Download Process

• VertiGIS FM
• CWE-610

Local privilege escalation due to improper soft link handling.

• Acronis Cyber Protect 17
• CWE-610

Local privilege escalation due to improper soft link handling.

• Acronis Cyber Protect 17
• CWE-610

OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files

• CWE-610

<2026.2.21 · fixed in 2026.2.21

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.

• Google Android
• CWE-610

thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference

• thinkgem JeeSite
• XML external entities (XXE)
• CWE-610

opencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done xml external entity reference

• opencc JFlow
• XML external entities (XXE)
• CWE-610

O2OA HTTP POST Request check xml external entity reference

• O2OA
• XML external entities (XXE)
• CWE-610

Bjskzy Zhiyou ERP com.artery.richclient.RichClientService RichClientService.class initRCForm xml external entity reference

• Bjskzy Zhiyou ERP
• XML external entities (XXE)
• CWE-610

HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad

• CWE-610

<1.11.1 · fixed in 1.11.1

beecue FastBee SIP Message ReqAbstractHandler.java getRootElement xml external entity reference

• beecue FastBee
• XML external entities (XXE)
• CWE-610

External Control of File Name or Path in Langflow

• Path traversal
• CWE-610

<1.7.1 · fixed in 1.7.1

bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference

• bestfeng oa_git_free
• XML external entities (XXE)
• CWE-610

Jinher OA type xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

Bjskzy Zhiyou ERP com.artery.richclient.RichClientService openForm xml external entity reference

• Bjskzy Zhiyou ERP
• XML external entities (XXE)
• CWE-610

Jinher OA text xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

Jinher OA XML text xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

IDOR in Patika Global Technologies' HumanSuite

• Patika Global Technologies HumanSuite
• Broken access control
• CWE-610

Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability

• Rockwell Automation ThinManager
• CWE-610

Jinher OA XML Type xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

Jinher OA XML Type xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy.

• Google Android
• CWE-610

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy.

• Google Android
• CWE-610

Local privilege escalation due to improper soft link handling.

• Acronis Cyber Protect Cloud Agent
• CWE-610

In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy.

• Google Android
• CWE-610

In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy.

• Google Android
• CWE-610

Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

• Sitecore Experience Platform (XP)
• Sitecore Content Management System (CMS)
• CWE-610

Jinher OA XmlHttp.aspx xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

Jinher OA ProjectScheduleDelete.aspx xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

Jinher OA DelTemp.aspx xml external entity reference

• Jinher OA
• XML external entities (XXE)
• CWE-610

Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference

• Fengoffice Feng Office
• XML external entities (XXE)
• CWE-610

CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webs…

• Schneider Electric Modicon Controllers M241 / M251
• Schneider Electric Modicon Controllers M258 / LMC058
• CWE-610

Symlink Following in Netskope Client Postinstall Script

• Netskope Client
• CWE-610

zhangyanbo2007 youkefu XML Document CallCenterRouterController.java xml external entity reference

• zhangyanbo2007 youkefu
• XML external entities (XXE)
• CWE-610

crmeb_java WeChatMessageController.java webHook xml external entity reference

• crmeb_java
• XML external entities (XXE)
• CWE-610

ywoa WXCallBack Interface XMLParse.java extract xml external entity reference

• ywoa
• XML external entities (XXE)
• CWE-610

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…

• Fortinet FortiTester
• Fortinet FortiOS
• CWE-610

Account Takeover in NamelessMC

• Nameless
• CWE-610