On this page

CWE-345: Insufficient Verification of Data Authenticity

Weakness Summary

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

  • Canonical source: MITRE CWE-345 (opens in a new tab)
  • Published Atomicorp CVE observations: 8
  • Distinct affected products in those observations: 8
  • Active Atomicorp rules associated with this weakness: 21

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2026-53513Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registrationbetter-auth/ssoAttack Blocked by Atomicorp337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022
CVE-2026-48105Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide patharcAttack Blocked by Atomicorp340007 , 344360 , 390709
CVE-2026-63094SigNoz < 0.134.0 SSO OAuth State Manipulation Session Token TheftsignozAttack Blocked by Atomicorp344365
CVE-2026-53728Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code LeakagemedplumAttack Blocked by Atomicorp340162 , 340163 , 344365
CVE-2026-12724Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-passwordKirkiAttack Blocked by Atomicorp333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-73657Trigger.dev: Cross-tenant payload poisoning via packet write + replaytrigger.devAttack Blocked by Atomicorp347009
CVE-2026-17011Nexter Blocks < 5.0.2 - Contributor+ Stored CSS InjectionNexter BlocksAttack Blocked by Atomicorp333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2026-10827Spectra (Ultimate Addons for Gutenberg) < 2.20.0 - Contributor+ Stored CSS Injection via Block AttributesSpectra LegacyAttack Blocked by Atomicorp333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 346755 , 350147 , 350148

Associated Atomicorp WAF Rules

RuleStatusBehavior
333140Activedisruptive (deny)
333141Activedisruptive (deny)
337109Activedisruptive (deny)
337110Activedisruptive (deny)
340007Activedisruptive (deny)
340095Activedisruptive (deny)
340147Activedisruptive (deny)
340148Activedisruptive (deny)
340162Activedisruptive (deny)
340163Activedisruptive (deny)
341256Activedisruptive (deny)
342259Activedisruptive (deny)
344360Activedisruptive (deny)
344365Activedisruptive (deny)
346755Activedisruptive (deny)
347009Activedisruptive (deny)
350147Activedisruptive (deny)
350148Activedisruptive (deny)
390709Activedisruptive (deny)
398021Activedisruptive (deny)
398022Activedisruptive (deny)

MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:

CAPEC-111 (opens in a new tab) , CAPEC-141 (opens in a new tab) , CAPEC-142 (opens in a new tab) , CAPEC-148 (opens in a new tab) , CAPEC-218 (opens in a new tab) , CAPEC-384 (opens in a new tab) , CAPEC-385 (opens in a new tab) , CAPEC-386 (opens in a new tab) , CAPEC-387 (opens in a new tab) , CAPEC-388 (opens in a new tab) , CAPEC-665 (opens in a new tab) , CAPEC-701 (opens in a new tab)