48 vulnerabilities classified as CWE-940 (通信信道源的不正确验证). AI Chinese analysis included.
CWE-940 represents a critical input validation weakness where software fails to authenticate the origin of an incoming communication channel. This flaw typically arises when applications accept connections or requests without verifying that they originate from a trusted, expected source. Attackers exploit this by establishing unauthorized channels from untrusted entities, effectively bypassing access controls to gain elevated privileges or trigger unintended functionality. To mitigate this risk, developers must implement rigorous source verification mechanisms, such as validating IP addresses, enforcing strict authentication protocols, and utilizing secure channel establishment procedures. By ensuring that every incoming connection is authenticated against a whitelist of known, trusted origins, organizations can prevent unauthorized actors from hijacking communication pathways and compromising system integrity.
IntentFilter filter = new IntentFilter("com.example.RemoveUser"); MyReceiver receiver = new MyReceiver(); registerReceiver(receiver, filter); public class DeleteReceiver extends BroadcastReceiver { @Override public void onReceive(Context context, Intent intent) { int userID = intent.getIntExtra("userID"); destroyUserData(userID); } }// Android @Override public boolean shouldOverrideUrlLoading(WebView view, String url){ if (url.substring(0,14).equalsIgnoreCase("examplescheme:")){ if(url.substring(14,25).equalsIgnoreCase("getUserInfo")){ writeDataToView(view, UserData); return false; } else{ return true; } } }// iOS -(BOOL) webView:(UIWebView *)exWebView shouldStartLoadWithRequest:(NSURLRequest *)exRequest navigationType:(UIWebViewNavigationType)exNavigationType { NSURL *URL = [exRequest URL]; if ([[URL scheme] isEqualToString:@"exampleScheme"]) { NSString *functionString = [URL resourceSpecifier]; if ([functionString hasPrefix:@"specialFunction"]) { // Make data available back in webview. UIWebView *webView = [self writeDataToView:[URL query]]; } return NO; } return YES; }Vulnerabilities classified as CWE-940 (通信信道源的不正确验证) represent 48 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.