CWE-841: Improper Enforcement of Behavioral Workflow
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- chenyme grok2api chenyme grok2api STT Billing voice_ws_handler.go behavioral workflow 5.3 Medium
- vendidero germanized for woocommerce Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Change 4.3 Medium
- opencart OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points 2.3 Low
- subhajitkhan online-clinic-management-system subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflow 5.3 Medium
- google chrome Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote... 8.8 High
- google chrome Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- error311 filerise FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts 8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 more Windows DNS Denial of Service Vulnerability 7.5 High
- deepseek-ai deepseek-harness deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow 5.1 Medium
- ibm security verify access, verify identity access, security verify access container +1 more +3 more Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access 6.5 Medium
- gitea Gitea fork workflow job revival through later approval 8.8 High
- google chrome Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0... 6.5 Medium
- google chrome Inappropriate implementation in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote... 5.4 Medium
- google chrome Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote... 8.8 High
- klever-io klever-go Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace 7.1 High
- nvidia infrastructure controller, infra controller +1 more NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause... 5.0 Medium
- sysadminsmedia homebox HomeBox: Forced Group Membership Without Consent in Homebox AddMember Handler 5.4 Medium
- patriksimek vm2 vm2 before 3.11.7 Timeout Bypass via FinalizationRegistry 8.7 High
- google chrome Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36... 6.5 Medium
- strongswan libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state... 5.6 Medium
- mikrotik routeros SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS 6.9 Medium
- macrozheng mall macrozheng mall Payment Status Endpoint paySuccess behavioral workflow 5.3 Medium
- klever-io klever-go Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits 8.7 High
- adobe dimension Dimension Log Server Configuration Lock Bypass Vulnerability 5.1 Medium
- adobe dimension Dimension Business Logic Flaw Allows Chained Backend Object Operations 6.9 Medium
- weblateorg weblate Weblate: Unverified REST API email changes 3.5 Low
- vivo kids mode A pop-up logic flaw in a certain feature of Kids Mode allows users to bypass password... 2.4 Low
- kimai Kimai before 2.63.0 Team Membership Removal via API 8.7 High
- google chrome Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65... 7.5 High
- webkul bagisto Webkul Bagisto store behavioral workflow 5.3 Medium
- webkul bagisto Webkul Bagisto RMA State Validation update-status behavioral workflow 5.3 Medium
- No product listed WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow 5.3 Medium
- No product listed WonderTrader TraderDD.cpp queryTrades behavioral workflow 6.3 Medium
- No product listed WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow 5.3 Medium
- pretix gmbh pretix-girosolution Insufficient validation of payment status in pretix-girosolution 6.3 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption 4.3 Medium
- sylius Sylius: Cart FormComponent allows modification or deletion of an already-completed order 6.5 Medium
- ibm watsonx.data intelligence Vulnerabilities found in Watson Data Intelligence 4.3 Medium
- pretix pretix-mollie Insufficient validation of payment status in pretix-mollie 6.3 Medium
- pretix pretix-oppwa Insufficient validation of payment status in pretix-oppwa 6.3 Medium
- pretix pretix-computop Insufficient validation of payment status in pretix-computop 6.3 Medium
- filamentphp filament Filament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission 7.4 High
- nimiq core-rs-albatross Nimiq light-blockchain: Light blockchain rebranch issue 6.5 Medium
- ninenines gun gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM 8.7 High
- significant-gravitas autogpt AutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/execute 5.4 Medium
- devolutions server Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature... 2.7 Low
- ethyca fides Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection 6.1 Medium
- yafnet YAF.NET: Pre-Handler Authorization Bypass on Admin Pages Enabling Blind SQL Execution via `/Admin/RunSql` 8.8 High
- joinmastodon mastodon Mastodon: Insufficient verification of email addresses 8.2 High
- Show olderLoading…