2240
Reference Description
https://www.cve.org/CVERecord?id=CVE-2019-19999
CVE-2018-20465 product allows read of sensitive database username/password variables using
server-side template injection
https://www.cve.org/CVERecord?id=CVE-2018-20465
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1409 Comprehensive Categorization: Injection 1400 2535
Notes
Relationship
Since expression languages are often used in templating languages, there may be some overlap
with CWE-917 (Expression Language Injection). XSS (CWE-79) is also co-located with template
injection.
Maintenance
The interrelationships and differences between CWE-917 and CWE-1336 need to be further
clarified.
References
[REF-1193]James Kettle. "Server-Side Template Injection". 2015 August 5. < https://
portswigger.net/research/server-side-template-injection >.2023-04-07.
[REF-1194]James Kettle. "Server-Side Template Injection: RCE For The Modern Web App". 2015
December 7. < https://www.youtube.com/watch?v=3cT0uE7Y87s >.
CWE-1338: Improper Protections Against Hardware Overheating
Weakness ID : 1338
Structure : Simple
Abstraction : Base
Description
A hardware device is missing or has inadequate protection features to prevent overheating.
Extended Description
Hardware, electrical circuits, and semiconductor silicon have thermal side effects, such that some
of the energy consumed by the device gets dissipated as heat and increases the temperature of
the device. For example, in semiconductors, higher-operating frequency of silicon results in higher
power dissipation and heat. The leakage current in CMOS circuits increases with temperature,
and this creates positive feedback that can result in thermal runaway and damage the device
permanently.
Any device lacking protections such as thermal sensors, adequate platform cooling, or thermal
insulation is susceptible to attacks by malicious software that might deliberately operate the device
in modes that result in overheating. This can be used as an effective denial of service (DoS) or
permanent denial of service (PDoS) attack.
Depending on the type of hardware device and its expected usage, such thermal overheating can
also cause safety hazards and reliability issues. Note that battery failures can also cause device
CWE Version 4.14
CWE-1338: Improper Protections Against Hardware Overheating
CWE-1338: Improper Protections Against Hardware Overheating