CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- apache cxfApache CXF: Self-issued ID token claims validation skipped9.1 Critical
- red hat openshift container platform 4Openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header injection on whitelisted paths6.5 Medium
- marimo-team marimomarimo < 0.23.15 API Key Exfiltration via Malicious Notebook PEP-723 Metadata7.1 High
- caliptra core firmware, core rom +1 moreProduction Debug-Unlock Token Verification Missing Device Binding1.8 Low
- angular, @angular common +1 moreAngular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning8.8 High
- @fastify/aws-lambda, fastify fastify\/aws-lambda +1 more@fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header9.1 Critical
- bouncycastle bcjmail-fips, bcmail-fips, bouncy castle for java lts +3 more +5 moreS/MIME validator trusts signer-asserted signingTime for path validation8.7 High
- wazuhWazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync7.0 High
- unknown spectra legacySpectra (Ultimate Addons for Gutenberg) < 2.20.0 - Contributor+ Stored CSS Injection via Block Attributes3.5 Low
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access Control vulnerability5.3 Medium
- red hat advanced cluster security 4Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection8.5 High
- authlib joserfcjoserfc accepts JWT with padding, leading to JWT malleability2.3 Low
- gleamInsufficient verification of Hex package metadata in Gleam7.6 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 for rhel 9 +1 more +3 moreEda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn7.5 High
- omnifacesOmniFaces: Forged combined-resource IDs and related output/push boundaries8.2 High
- budibase serverBudibase before 3.40.0 Identity Confusion via Chat-Link Handoff CSRF8.7 High
- better-authbetter-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP8.7 High
- logtoLOIDC nonce validation bypass9.1 Critical
- logtoSAML <Conditions> element not validated7.5 High
- @auth core, nextauthjs next-auth +1 moreNextAuth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them6.8 Medium
- powerdns recursorRRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation7.5 High
knotDebianKnot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where...6.5 Medium- n8nn8n before 2.32.1 Authentication Bypass via Token Exchange8.9 High
- progress telerik ui for asp.net ajaxDialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX5.9 Medium
- nlnet labs unboundBOGUS configured primary hostname accepted for XFR in auth/rpz zones6.5 Medium
- nlnet labs unboundCross-zone wildcard cache poisoning via RRSIG.labels manipulation7.5 High
- oracle e-business suite, oracle corporation production scheduling +1 moreVulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component:...5.3 Medium
- themeum kirkiKirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password4.3 Medium
- unknown reviews feedReviews Feed < 2.6.5 - Unauthenticated Stored Arbitrary Shortcode Execution via Google Reviews4.8 Medium
- signozSigNoz < 0.134.0 SSO OAuth State Manipulation Session Token Theft7.6 High
- openclawOpenClaw < 2026.6.5 Authentication Bypass via HTTP Canvas5.1 Medium
- h2o quiclyQuicly is vulnerable to stateless reset injection5.3 Medium
- activepiecesActivepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL5.3 Medium
- gitroomhq postiz-appPostiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook7.7 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreEclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the...8.8 High
- microsoft .net, .net 10.0 runtime, .net 8.0 runtime +17 more +19 more.NET Security Feature Bypass Vulnerability8.1 High
- mervinpraison praisonaiPraisonAI AgentMail before 4.6.78 Message Injection via Webhook6.9 Medium
- thimpress wp hotel bookingWP Hotel Booking <= 2.3.1 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via PayPal IPN Handler5.3 Medium
- chainguard-dev apko, melange +1 moremelange: Incomplete package integrity verification allows data section substitution8.3 High
- sigstore sigstore-gosigstore-go: Multi-log threshold bypass via single compromised log5.9 Medium
- discourseDiscourse: Forged AWS SNS bounce notifications can disable a targeted user's email (missing TopicArn binding)6.5 Medium
- lepture mistuneMistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content4.3 Medium
- @better-auth sso, better-auth, better-auth better auth +1 more +3 moreBetter Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration9.6 Critical
- better-auth better auth, better-auth +1 moreBetter Auth: Account takeover via OAuth auto-link to unverified pre-registered email8.3 High
- better-auth better auth, better-auth +1 moreBetter Auth: Unauthorized invitation acceptance via unverified email match in organization plugin7.7 High
- better-auth, better-auth better auth +1 moreBetter Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins9.1 Critical
- zcash orchard, zcash, zcashfoundation zebra +2 more +4 moreMissing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness9.3 Critical
- coderCoder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access5.8 Medium
- traefikTraefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth7.8 High
- traefikForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false6.9 Medium
- Show moreLoading…