CWE-837: Improper Enforcement of a Single, Unique Action
The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or incorrectly enforces this restriction.
A kind of CWE-799 Insufficient anti-automation.
From the CWE List. © The MITRE Corporation.
Newest
- thelia Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders 5.3 Medium
- @payloadcms plugin-ecommerce, payloadcms payload +1 more Payload: Order confirmation validation issue in Payload Ecommerce 8.8 High
- pmmp pocketmine-mp PocketMine-MP before 5.44.2 Denial of Service via ResourcePackClientResponsePacket 2.3 Low
- mybb MyBB: Default CAPTCHA missing invalidation 5.3 Medium
- torproject tor Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash... 3.7 Low
- getgrav grav Grav: Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic 8.1 High
- phoenix616 inventorygui InventoryGui allows item duplication in GUIs which use GuiStorageElement 5.3 Medium
- phoenix616 inventorygui InventoryGUI vulnerable to item duplication via Bundle items when using GuiStorageElement 5.9 Medium
- phoenix616 inventorygui InventoryGui affected by item duplication in GUIs which use GuiStorageElement 5.0 Medium
- matrix specification The Matrix specification before 1.16 (i.e., with a room version before 12) lacks create event... 7.1 High
- zoom communications, inc workplace clients for windows, zoom meeting software development kit, rooms +3 more +5 more Zoom Workplace Clients for Windows - Improper Action Enforcement 5.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 more Improper Enforcement of Unique Constraint in lunary-ai/lunary 6.5 Medium
- ctfd Tokens in CTFd used for account activation and password resetting can be used interchangeably for... 6.3 Medium
- ctfd While assignment of a user to a team (bracket) in CTFd should be possible only once, at the... 5.3 Medium
- issuetrak Unauthorized Modification of Ticket Requester 5.3 Medium
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +11 more +13 more Keycloak: potential bypass of brute force protection 6.5 Medium
- thecosy icecms Thecosy IceCMS Love resource improper enforcement of a single, unique action 5.3 Medium
- thecosy icecms Thecosy IceCMS Comment Like improper enforcement of a single, unique action 3.1 Low
- thecosy icecms Thecosy IceCMS Like improper enforcement of a single, unique action 4.3 Medium
- phpkobo ajax poll script phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action 5.3 Medium