CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteApply5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/deleteTenantPackUser5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/changeOwenUserTenant7.1 High
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/updateApplyStatus5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/listPackByTenantUserId5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/queryTenantAuthInfo5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/passApply8.6 High
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via getTenantPackApplyUsers Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/quartzJob/queryById5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/oss/file/queryById5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via GET /openapi/list5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/api/updateAvatar5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getRolesByUserId5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserPermissionSet5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserRolesById5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via getDynamicDbSourceByCode Endpoint7.1 High
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/checkRule/importExcel5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/category/importExcel5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/category/edit5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/category/delete5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/category/deleteBatch5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/queryById5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/dict/deletePhysic/{id}5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/user/deleteGroupUser5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via deleteUserGroupBatch Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepart/appImportExcel5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission deleteBatch Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/add5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission queryById Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/delete5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartPermission/edit5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysDepartPermission datarule Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via saveDeptRolePermission Endpoint8.6 High
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/role/datarule Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysMessage queryById Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysMessage Edit Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysMessage deleteBatch Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/log/deleteBatch7.1 High
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/log/delete Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/position/edit5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /sys/position/deleteBatch5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint5.3 Medium
- jeecgbootJeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch5.3 Medium
- Show moreLoading…