CWE-647: Use of Non-Canonical URL Paths for Authorization Decisions
The product defines policy namespaces and makes authorization decisions based on the assumption that a URL is canonical.
A kind of CWE-863 Incorrect Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- splunk soar Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR 8.8 High
- apache software foundation apisix Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch 6.3 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use... 3.7 Low
- eclipse foundation arrowhead In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects... 8.9 High
- envoyproxy envoy Envoy: Path normalization does not handle dot and dotdot segments with parameters 5.3 Medium
- hashicorp consul, consul enterprise +1 more L7 intention authorization bypass via custom public listener 4.2 Medium
-
github.com/zxh326/kiteGo Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources 6.5 Medium - filebrowser File Browser: Colliding username normalization gives two users the same home directory 8.1 High
- eclipse jetty Eclipse Jetty: Path parameter traversal 5.3 Medium
- withastro astro Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch 8.2 High
- rust cargo Cargo can be coerced to share credentials between registries 2.3 Low
- astro Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765 6.5 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 more Aap-gateway: improper path validation in gateway allows credential exfiltration 6.7 Medium
- sensiolabs httpfoundation, symfony +1 more Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass 7.3 High
- browser-use Duplicate Advisory: `allowed_domains` can be bypassed by putting a decoy domain in http auth username portion of a URL 4.0 Medium
- sonos api.sonos.com Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a... 3.4 Low
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 more Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions 8.6 High