CWE-571 - Expression is Always True

Home/CWEs/CWE info/

CWE-571

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Expression is Always True

Description: The product contains an expression that will always evaluate to true.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses

CWE-561Dead Code

CWE-710Improper Adherence to Coding Standards

Release Date:
2006-12-15

Latest Modification Date:
2023-06-29

Top Security News

PoC exploit for critical WhatsUp Gold RCE vulnerability released (CVE-2024-8785)

Microsoft fixes exploited zero-day (CVE-2024-49138)

QR codes bypass browser isolation for malicious C2 communication

Facebook, Instagram, WhatsApp hit by massive worldwide outage

Chinese hackers use Visual Studio Code tunnels for remote access

Citrix shares mitigations for ongoing Netscaler password spray attacks

Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)

Microsoft December 2024 Patch Tuesday fixes 1 exploited zero-day, 71 flaws

Common Alerts

InformationalSec-Fetch-User Header is Missing

MediumCross-Domain Misconfiguration

MediumAnti-CSRF Tokens Check

LowDeprecated Feature Policy Header Set

LowSecure Pages Include Mixed Content

InformationalInformation Disclosure - Information in Browser localStorage

InformationalInformation Disclosure - Information in Browser sessionStorage

MediumReverse Tabnabbing

HighASP.NET ViewState Integrity

InformationalPossible Username Enumeration

Top CVE List

CVE-2024-49138 Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2024-11680 ProjectSend Improper Authentication Vulnerability

CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

CVE-2024-38217 Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-43047 Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Common CWEs

CWE-1048 Invokable Control Element with Large Number of Outward Calls

MediumCWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CWE-84 Improper Neutralization of Encoded URI Schemes in a Web Page

CWE-514 Covert Channel

CWE-577 EJB Bad Practices: Use of Sockets

CWE-1284 Improper Validation of Specified Quantity in Input

HighCWE-676 Use of Potentially Dangerous Function

CWE-574 EJB Bad Practices: Use of Synchronization Primitives

CWE-548 Exposure of Information Through Directory Listing

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-571 - Expression is Always True

The product contains an expression that will always evaluate to true.