1972
Common Consequences
Scope Impact Likelihood
Availability DoS: Resource Consumption (CPU)
Other Reduce Performance
Observed Examples
Reference Description
CVE-2022-37734 Chain: lexer in Java-based GraphQL server does not enforce maximum
of tokens early enough (CWE-696), allowing excessive CPU consumption
(CWE-1176)
https://www.cve.org/CVERecord?id=CVE-2022-37734
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
References
[REF-1008]Wikipedia. "Computational complexity theory)". < https://en.wikipedia.org/wiki/
Computational_complexity_theory >.
CWE-1177: Use of Prohibited Code
Weakness ID : 1177
Structure : Simple
Abstraction : Class
Description
The product uses a function, library, or third party component that has been explicitly prohibited,
whether by the developer or the customer.
Extended Description
The developer - or customers - may wish to restrict or eliminate use of a function, library, or third
party component for any number of reasons, including real or suspected vulnerabilities; difficulty to
use securely; export controls or license requirements; obsolete or poorly-maintained code; internal
code being scheduled for deprecation; etc.
To reduce risk of vulnerabilities, the developer might maintain a list of "banned" functions that
programmers must avoid using because the functions are difficult or impossible to use securely.
This issue can also make the product more costly and difficult to maintain.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 710 Improper Adherence to Coding Standards 1549
CWE Version 4.14
CWE-1177: Use of Prohibited Code
CWE-1177: Use of Prohibited Code