CWE-675 - Multiple Operations on Resource in Single-Operation Context
- Abstraction:Class
- Structure:Simple
- Status:Draft
- Release Date:2008-04-11
- Latest Modification Date:2023-10-26
Weakness Name
Multiple Operations on Resource in Single-Operation Context
Description
The product performs the same operation on a resource two or more times, when the operation should only be applied once.
Common Consequences
Scope: Other
Impact: Other
Related Weaknesses
CWE-102Struts: Duplicate Validation Forms
Apple Fined €150 Million by French Regulator Over Discriminatory ATT Consent Practices
VMware Workstation auto-updates broken after Broadcom URL redirect
OpenAI says Deep Research is coming to ChatGPT free "very soon"
Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders
Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks
North Korean hackers adopt ClickFix attacks to target crypto firms
Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images
Russia-Linked Gamaredon Uses Troop-Related Lures to Deploy Remcos RAT in Ukraine
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability
CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability
CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
LowInsufficient Site Isolation Against Spectre Vulnerability
InformationalInformation Disclosure - Information in Browser localStorage
MediumInsecure HTTP Method
InformationalRetrieved from Cache
InformationalCookie Slack Detector
InformationalSec-Fetch-Dest Header Has an Invalid Value
CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-1265 Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls
CWE-574 EJB Bad Practices: Use of Synchronization Primitives
CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined
CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory