CWE-570 - Expression is Always False
- Abstraction:Base
- Structure:Simple
- Status:Draft
- Release Date:2006-12-15
- Latest Modification Date:2023-06-29
Weakness Name
Expression is Always False
Description
The product contains an expression that will always evaluate to false.
Common Consequences
Scope: Other
Impact: Quality Degradation, Varies by Context
Related Weaknesses
Oracle denies breach after hacker claims theft of 6 million data records
CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites
CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825)
Oracle Health breach compromises patient data at US hospitals
New SuperBlack ransomware exploits Fortinet auth bypass flaws
Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms
Oracle customers confirm data stolen in alleged cloud breach is valid
Microsoft confirms it's killing off Skype in May, after 14 years
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
MediumBypassing 403
InformationalUser Controllable Charset
InformationalBase64 Disclosure in WebSocket message
InformationalCross Site Scripting (Persistent) - Prime
InformationalInformation Disclosure - Sensitive Information in URL
InformationalUsername Hash Found
MediumCRLF Injection