CWE-424: Improper Protection of Alternate Path
The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.
A kind of CWE-638 Not Using Complete Mediation.
From the CWE List. © The MITRE Corporation.
Newest
- docker desktop Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall 9.2 Critical
- openstack ironic OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a... 5.0 Medium
- getgrav grav-plugin-flex-objects Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes 7.1 High
- splunk soar Improper Protection of Alternate Path in Splunk SOAR 9.8 Critical
- bytecodealliance wasmtime Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter Bypass 6.3 Medium
- renovatebot renovate, mend mend-renovate-ce helm chart, mend-renovate-enterprise-edition helm chart +3 more +5 more Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets 7.1 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 more Windows AppX Deployment Service Security Feature Bypass Vulnerability 5.5 Medium
- aws amazon athena Missing authorization checks in Amazon Athena engine version 3 request handling 6.3 Medium
- grafana mcp-k6 Arbitrary file read via the convert_playwright_script prompt in mcp-k6 6.5 Medium
- 9001 copyparty copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers 2.3 Low
- crewai CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of... 8.1 High
- ash-project ash lua AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes 8.2 High
- ash-project ash authentication oauth2 server ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls 6.3 Medium
- pcre pcre2 PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached... 8.2 High
- apache tika Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false 6.9 Medium
- gitea open source git server Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939) 6.5 Medium
- openstack ironic In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI... 8.2 High
- palo alto networks prisma access agent Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux 4.4 Medium
- palo alto networks prisma browser Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass 7.3 High
- ivanti neurons for itsm (cloud), neurons for itsm (on-premise) +1 more Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote... 5.7 Medium
- amazon aws api mcp server, aws api mcp server +1 more AWS API MCP File Access Restriction Bypass 6.8 Medium
- gitea Gitea allows attackers to add attachments with forbidden file extensions 8.2 High
- palo alto networks prisma browser Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser 1.1 Low
- neojapan inc. desknet's neo Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9... 5.3 Medium
- beyondtrust privilege management for windows Privilege Management for Windows - Elevation of Privilege 7.1 High
- arris vip1113 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a... 6.7 Medium
- arris vip1113 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a... 6.4 Medium
- vbulletin Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing... 9.0 Critical
- vbulletin vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke... 10.0 Critical
- hackmd codimd CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG... 4.9 Medium
- hackmd codimd CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded JavaScript... 4.9 Medium
- yiiframework yii yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key 9.0 Critical
- palo alto networks cortex xdr broker vm Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers 5.3 Medium
- tr7 application security platform (asp), tr7cyberdefense asp +1 more Container Escape Vulnerability in TR7's Application Security Platform (ASP) 8.7 High
- siemens himed cockpit 12 pro, himed cockpit 14 pro+, himed cockpit 18 pro +1 more +3 more A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >=... 9.3 Critical
- gitlab Improper Protection of Alternate Path in GitLab 6.5 Medium
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass 5.3 Medium
- kioware In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use... 7.4 High
- kioware KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading... 8.4 High
- cisco identity services engine, identity services engine software +1 more A vulnerability in the web-based management interface of Cisco Identity Services Engine could... 6.7 Medium
- ibm mq appliance IBM MQ privilege escalation 6.7 Medium
- docker desktop Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell 7.1 High
- docker desktop Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers 7.1 High
- dominionvoting imagecast x, dominion voting systems imagecast x application, imagecast x firmware +2 more 2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424 6.8 Medium
- google android, samsung mobile devices +1 more Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1... 4.6 Medium
- google android, samsung cloud, samsung mobile clould +1 more +3 more Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022... 4.2 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 more An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble... 6.5 Medium
- abb pb610 panel builder 600 ABB PB610 HMIStudio accepts malicious DLL file in an application 7.1 High
- abb pb610 panel builder 600 PB610 HMISimulator provides interface with access to arbitrary files 4.3 Medium