Home/CWE/Externally Controlled Reference to a Resource in Another Sphere
Weakness

Externally Controlled Reference to a Resource in Another Sphere

CWE-610 · Class · Draft

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-664 · Improper Control of a Resource Through its Lifetime
Children (more specific)
ParentOfCWE-1021 · Improper Restriction of Rendered UI Layers or Frames
ParentOfCWE-15 · External Control of System or Configuration Setting
ParentOfCWE-384 · Session Fixation
ParentOfCWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
ParentOfCWE-470 · Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
ParentOfCWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
ParentOfCWE-611 · Improper Restriction of XML External Entity Reference
ParentOfCWE-73 · External Control of File Name or Path
ParentOfCWE-918 · Server-Side Request Forgery (SSRF)
◆

Attack Patterns (CAPEC)

1
How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-219XML Routing Detour Attacks
⚠

CVEs With This Weakness

236
A sample of the 236 CVEs tagged with this weakness.
CVECVE-2026-41107
CVECVE-2026-34327
CVECVE-2026-3404
CVECVE-2026-32008
CVECVE-2026-30903
CVECVE-2026-30817
CVECVE-2026-30816
CVECVE-2026-28722
CVECVE-2026-28721
CVECVE-2026-2536
CVECVE-2026-2074
CVECVE-2026-1218
◉

Nuclei Scanner Templates

4
Open-source Nuclei templates that detect this weakness class - an actionable scan-for-it pivot. Licensed under the ProjectDiscovery / Nuclei terms.
criticalQNAP QTS Photo Station External Reference - Local File Inclusion
highAll-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery
mediumSpring Cloud Netflix - Server-Side Request Forgery
mediumMoodle - Cross-Site Scripting/Remote Code Execution
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin