Incorrect Control Flow Scoping
CWE-705
The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.
We track 6 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8.
Latest Incorrect Control Flow Scoping vulnerabilities
- 7.3 High severity
CloudClassroom-PHP-Project: Execution After Redirect (EAR)
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploi
- 7.1 High severity
PraisonAI: Time-of-check Time-of-use (TOCTOU) Race Condition
PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.gaierror because the exception path uses except socket.gaierror: pass. JobExecutor._send_webhook() lat
- 8.8 High severity
Free-CRM: Execution After Redirect (EAR)
A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1. Affected by this issue is some unknown functionality of the component Administrative Interface. Executing a manipulation can lead to execution after redirect.
- 8.8 High severity
Asp.Net-Core-Inventory-Order-Management-System: Execution After Redirect (EAR)
A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.20250118. Affected is an unknown function of the component Administrative Interface. Such manipulation leads to execution after redirect. The attack may be launc
- 7.5 High severity
BIG-IP: Incorrect Control Flow Scoping
When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to termin
- 7.5 High severity
Real Estate Management System: Execution After Redirect (EAR)
A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is an unknown function of the file /admin/userlist.php. Such manipulation leads to execution after redirect. The attack can be executed remotel