Skip to content

CWE-621 · Deserialization and Object Injection

Variable Extraction Error

1CVEs
0exploited
0with a public check
0likely (EPSS 10%+)

1 CVEs with CWE-621 as their weakness

CVEs with CWE-621, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2018-6334Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unex…Facebook · HHVM · CVSS 9.8 · 2018-12-319.81.9%2018-12-31

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in