CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeIncorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a...6.5 Medium
- google chromeIncorrect authorization in Select in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a...6.5 Medium
- google chromeIncorrect authorization in Controls in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeIncorrect authorization in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior...4.3 Medium
- google chromeIncorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65...7.1 High
- google chromeIncorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeIncorrect authorization in DOM in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeIncorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeIncorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeIncorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeIncorrect authorization in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65...4.3 Medium
- google chromeIncorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Downloads in Google Chrome prior to 152.0.7977.65 allowed a remote...5.4 Medium
- google chromeIncorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...3.1 Low
- google chromeIncorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeIncorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65...4.3 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed...4.3 Medium
- google chromeIncorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote...4.3 Medium
- google chromeIncorrect authorization in USB in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...8.3 High
- google chromeIncorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote...8.3 High
- liketrek trekliketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization6.3 Medium
- apache dolphinschedulerApache DolphinScheduler: General user can mint admin access tokens via /access-tokens8.8 High
- typo3 extension "femanager"Broken Access Control in extension "femanager" (femanager)8.3 High
- getgrav gravGrav Login Plugin before 1.0.16 Privilege Escalation via Unlock9.3 Critical
- cloudreveCloudreve before 4.16.1 Authentication Bypass via Cached Context Hint6.9 Medium
- Show moreLoading…