CWE-623—Unsafe ActiveX Control Marked Safe For Scripting

名称

Unsafe ActiveX Control Marked Safe For Scripting

描述

An ActiveX control is intended for restricted use, but it has been marked as safe-for-scripting.

This might allow attackers to use dangerous functionality via a web page that accesses the control, which can lead to different resultant vulnerabilities, depending on the control's behavior.

常见后果

范围：

Confidentiality, Integrity, Availability

影响：

Execute Unauthorized Code or Commands

相关 CWE

• CWE-267Privilege Defined With Unsafe Actions
• CWE-618Exposed Unsafe ActiveX Method