CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- wptb wp table builder – drag & drop table builderWP Table Builder <= 2.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'ids' Parameter7.1 High
- laurent22 joplinJoplin: Pending share recipients can write items into shared folders before accepting invitations4.3 Medium
- supabase realtimeSupabase Realtime: Incorrect Authorization6.5 Medium
- warp-tech warpgateWarpgate: API tokens bypass the user's allowed_ip_ranges restriction4.3 Medium
- inventreeInvenTree: Barcode-scan API (`POST /api/barcode/`) returns full serialized object data without enforcing the model's view role6.5 Medium
- steveiliop56 tinyauthTinyauth: forward-auth per-app ACL is matched case-sensitively against the (case-insensitive) hostname, letting an authenticated user reach apps they are not on the allowlist for8.1 High
- feast-dev feastFeast: `pull_request_target` integration tests run untrusted fork code with production cloud secrets; the `ok-to-test` label guard is bypassable via label persistence on `synchronize`8.9 High
- hatchet-dev hatchetHatchet DurableTask WorkerStatus gRPC resolves caller-supplied durable-task UUIDs via ListSatisfiedEntries with no tenant_id filter4.3 Medium
- hatchet-dev hatchetHatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check6.3 Medium
- openbaoOpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters7.5 High
- gocdGoCD is vulnerable to historical server configuration API authorization bypass5.1 Medium
- gocdGoCD is vulnerable to authorization bypass via material connection test APIs4.9 Medium
- gocdGoCD is vulnerable to pipeline template view API authorization bypass5.3 Medium
- gocdGoCD is vulnerable to authorization bypass via support process list API3.7 Low
- gocdGoCD before 26.1.0 is vulnerable to authorization bypass via job status API4.3 Medium
- red hat certificate system 9, enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 morePki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent invoke the admin-only raw profile creation endpoint8.1 High
- grimmory-tools grimmorygrimmory-tools grimmory Settings API Endpoint AppSettingController.java AppSettingController.getAppSettings authorization5.3 Medium
- blockspare – gutenberg blocks for news, magazine, blog & business websitesBlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation4.3 Medium
- unknown secure custom fieldsSecure Custom Fields < 6.9.4 - Unauthenticated Post Modification via Front-End Form ID Substitution3.7 Low
- ibm websphere application serverIBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities5.3 Medium
- obot-platform obotObot before v0.23.0 Authentication Bypass via Registry API6.9 Medium
- obot-platform obotObot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration8.7 High
- syslifters sysreptorSysReptor: Anonymous note-share link discloses project member identities and non-shared note activity3.5 Low
- projectcapsule capsuleCapsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement7.1 High
- arcadedata arcadedbArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries7.1 High
- arcadedata arcadedbArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission8.6 High
- apache software foundation airflowApache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)7.5 High
- microsoft azure machine learningAzure Machine Learning Information Disclosure Vulnerability8.6 High
- google chromeIncorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker...4.3 Medium
- dromara mayfly-goDromara mayfly-go AI Assistant ai.go authorization5.3 Medium
- patriksimek vm2vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver9.4 Critical
- patriksimek vm2vm2 before 3.11.7 Module Allowlist Bypass via Prefix Matching2.3 Low
- red hat satellite 6Rubygem-foreman_remote_execution: job output readable without object-level view_job_invocations check4.3 Medium
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Incorrect...3.7 Low
- eclipse foundation ankaiosIn Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control...4.8 Medium
- red hat satellite 6Rubygem-foreman_ansible: ansible inventory api ignores view_hosts permission filters, exposes hidden parameters4.3 Medium
- red hat satellite 6Rubygem-foreman_ansible: unscoped lookupvalue deletion allows cross-model override value destruction4.3 Medium
- suse neuvectorLogout bypass via alternate JWT spelling2.0 Low
- unknown autopayAutopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletion6.5 Medium
- chenhg5 cc-connectcc-connect through 1.5.0 User Allowlist Bypass via Feishu Card Actions8.7 High
- manticoresoftware manticore searchManticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass8.7 High
- goadmingroup go-adminGoAdmin through 1.2.26 Authorization Bypass via Query Parameter8.6 High
- bytedance coze-studioCoze Studio through 0.5.1 Cross-Tenant Database Access via Workflow SQL Node8.7 High
- chroma-core chromaChroma through 1.5.9 Authorization Bypass via Collection Identifier8.6 High
- requarks wiki.jsWiki.js through 2.5.314 Path Prefix Matching Authorization Bypass8.6 High
- requarks wiki.jsWiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission5.3 Medium
- twentyhq twentyTwenty before 2.35.0 Permission Bypass via groupBy-with-records Query7.1 High
- opencveOpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scope5.3 Medium
- shlinkio shlinkShlink through 5.1.6 Mercure Token Authorization Bypass7.1 High
- cisco broadworksCisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability6.5 Medium
- Show moreLoading…