Inconsistency Between Implementation and Documented Design
CWE-1068
The implementation of the product is not consistent with the design as described within the relevant documentation.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.6.
Latest Inconsistency Between Implementation and Documented Design vulnerabilities
- 9.1 Critical severity
Apache Commons Codec: Incorrect Provision of Specified Functionality
Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output. In fact, doFinalize does not change the hash state: calling it again wi
- 8.1 High severity
HarmonyOS: Inconsistency Between Implementation and Documented Design
Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may cause the failure to capture specific Wasm exception types.
- 8.6 High severity
chisel: Missing Authentication for Critical Functionality
Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. The Chisel server doesn't ever read the documented `AUTH` environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. Any