CWE-441: Unintended Proxy or Intermediary
The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere.
Also known as Confused Deputy.
A kind of CWE-610 Externally Controlled Reference to a Resource in Another Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.9 Critical
- kubeflow pipelines Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation 5.0 Medium
- google chrome Confused deputy in WebUI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 8.8 High
- google chrome Confused deputy in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 8.8 High
- google chrome Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote... 8.8 High
- google android An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER`... 7.8 High
- google android The `ClusterRenderingService.dump()` method, accessible to processes holding `android.permission... 5.3 Medium
- google android In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due... 8.4 High
- google android In multiple locations, there is a possible permission bypass due to a confused deputy. This could... 4.0 Medium
- google android In multiple locations, there is a possible permission bypass due to a confused deputy. This could... 8.4 High
- google android In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a... 8.4 High
- google android In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to... 8.4 High
- google android In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background... 8.4 High
- google android In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background... 8.4 High
- google android In run of AddAccountSettings.java, there is a possible background activity launch due to a... 8.4 High
- google android In multiple locations, there is a possible permission bypass due to a confused deputy. This could... 8.4 High
- google android In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due... 8.4 High
- google android In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass... 4.0 Medium
- google android In multiple functions in multiple locations, there is a possible execution of sensitive USSD... 8.4 High
- google android In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent... 8.4 High
- google android In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak... 4.0 Medium
- google android In onActivityResult in multiple locations, there is a possible contact leak from protected... 8.4 High
- google android In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission... 8.4 High
- coder Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication 8.3 High
- hcl software bigfix aex HCL BigFix AEX is affected by multiple security vulnerabilities. 4.2 Medium
- berriai litellm LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key 9.9 Critical
- storybookjs storybook Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites 8.6 High
- progressive robot ltd hmailserver Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer 5.9 Medium
- google chrome Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47... 8.8 High
- google chrome Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote... 8.8 High
- red hat streams for apache kafka 2, streams for apache kafka 3, streamshub console for apache kafka® +2 more Console-operator: streams for apache kafka console: cross-namespace kafkauser secret exfiltration via confused deputy 7.7 High
- angular, angular devtools +1 more Angular DevTools (Local DoS) 5.1 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 more Windows Broadcast DVR User Service Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 more Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability 7.8 High
- grafana enterprise, oss +1 more Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs 6.3 Medium
- zitadel ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie 9.2 Critical
- @tinacms app, tinacms +1 more TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment 9.3 Critical
- cisa malcolm Authentication Bypass by Spoofing in Malcolm 6.5 Medium
- asynchttpclient async-http-client AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host 9.4 Critical
- asynchttpclient async-http-client AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT 7.5 High
- sonicwall sma1000 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due... 10.0 Critical
- @backstage plugin-kubernetes-backend, backstage, linuxfoundation backstage\/plugin-kubernetes-backend +2 more Backstage: Unsupported catalog cluster authentication mode in kubernetes backend 3.5 Low
- backstage, @backstage plugin-scaffolder-backend, plugin-scaffolder-backend-module-azure +10 more +12 more Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback 6.4 Medium
- Show olderLoading…