CWE-639 · Authorization Bypass Through User-Controlled Key (page 20)
Page 20 of 23 — CVEs classified under CWE-639, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2065 | High | 8.8 | 2023-05-24 | Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. … |
CVE-2023-2702 | High | 8.8 | 2023-05-23 | Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass… |
CVE-2023-2844 | Medium | 4.9 | 2023-05-23 | Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0. |
CVE-2023-2713 | Critical | 9.8 | 2023-05-20 | Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentic… |
CVE-2023-2276 | Critical | 9.8 | 2023-05-20 | The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object References in versions u… |
CVE-2023-2548 | Medium | 6.6 | 2023-05-16 | The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 5.2.0.5. This is due to the plu… |
CVE-2023-31182 | High | 8.1 | 2023-05-08 | EasyTor Applications – Authorization Bypass - EasyTor Applications may allow authorization bypass via unspecified method. |
CVE-2023-30216 | Medium | 5.4 | 2023-05-04 | Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information. |
CVE-2023-30550 | Medium | 6.8 | 2023-05-04 | MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. Th… |
CVE-2023-28656 | High | 8.1 | 2023-05-03 | NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software ver… |
CVE-2023-1911 | Medium | 4.3 | 2023-05-02 | The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can be viewed, allowing a… |
CVE-2023-1125 | Medium | 6.5 | 2023-05-02 | The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to… |
CVE-2023-2260 | High | 8.8 | 2023-04-24 | Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. |
CVE-2022-48313 | Medium | 6.5 | 2023-04-16 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect co… |
CVE-2018-17455 | High | 7.5 | 2023-04-15 | An issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Attackers could obtain sensitive informatio… |
CVE-2018-17449 | High | 7.5 | 2023-04-15 | An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain… |
CVE-2022-45175 | Medium | 6.5 | 2023-04-14 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/{ID-FILE]/c/{N]/{C]/we… |
CVE-2023-1417 | Medium | 4.3 | 2023-04-05 | An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possibl… |
CVE-2023-0967 | Medium | 6.5 | 2023-04-05 | Bhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of other application users and data that should only… |
CVE-2023-1750 | High | 7.1 | 2023-04-04 | The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could retrieve dev… |
CVE-2023-1749 | Medium | 6.5 | 2023-04-04 | The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a valid NexxHome deviceId could send API req… |
CVE-2023-26984 | High | 8.1 | 2023-03-29 | An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request. |
CVE-2023-24842 | Medium | 5.3 | 2023-03-27 | HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of… |
CVE-2023-24834 | Medium | 6.5 | 2023-03-27 | WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerabi… |
CVE-2023-24625 | Medium | 6.5 | 2023-03-24 | Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack. |
CVE-2023-28686 | High | 7.1 | 2023-03-24 | Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. The attacker can ch… |
CVE-2023-28334 | Medium | 4.3 | 2023-03-23 | Authenticated users were able to enumerate other users' names via the learning plans page. |
CVE-2023-1462 | High | 8.8 | 2023-03-21 | Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abus… |
CVE-2023-0865 | High | 8.8 | 2023-03-20 | The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicat… |
CVE-2023-1463 | Medium | 5.4 | 2023-03-17 | Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. |
CVE-2023-28109 | Medium | 6.5 | 2023-03-16 | Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct… |
CVE-2021-36400 | Medium | 5.3 | 2023-03-06 | In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions. |
CVE-2023-25403 | High | 7.5 | 2023-03-03 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. A… |
CVE-2023-0882 | High | 8.8 | 2023-02-17 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This i… |
CVE-2023-25160 | Medium | 4.1 | 2023-02-13 | Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can access the mail box… |
CVE-2022-34138 | High | 7.5 | 2023-02-03 | Insecure direct object references (IDOR) in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive information. |
CVE-2023-0558 | High | 8.2 | 2023-01-27 | The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up… |
CVE-2023-0550 | High | 8.1 | 2023-01-27 | The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the fa… |
CVE-2021-36539 | Medium | 6.5 | 2023-01-26 | Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc… |
CVE-2022-45927 | High | 8.8 | 2023-01-18 | An issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java application server can be used to bypass the authentication of the QDS… |
CVE-2022-40319 | High | 7.5 | 2023-01-17 | The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email address in a wa.exe URL… |
CVE-2023-22471 | Low | 3.5 | 2023-01-14 | Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Broken access control allows… |
CVE-2022-4812 | Medium | 6.5 | 2022-12-28 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
CVE-2022-4811 | High | 8.3 | 2022-12-28 | Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1. |
CVE-2022-4806 | Medium | 5.3 | 2022-12-28 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
CVE-2022-4803 | High | 8.8 | 2022-12-28 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
CVE-2022-4802 | Medium | 5.4 | 2022-12-28 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
CVE-2022-4799 | Medium | 6.5 | 2022-12-28 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
CVE-2022-4798 | Medium | 5.3 | 2022-12-28 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1. |
CVE-2022-46179 | Critical | 9.2 | 2022-12-28 | LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GIT… |
CVE-2022-4686 | Critical | 9.8 | 2022-12-23 | Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0. |
CVE-2022-3805 | High | 8.6 | 2022-12-22 | The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and… |
CVE-2022-3794 | Medium | 5.4 | 2022-12-22 | The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticate… |
CVE-2022-31683 | Medium | 5.4 | 2022-12-19 | Concourse (7.x.y prior to 7.8.3 and 6.x.y prior to 6.7.9) contains an authorization bypass issue. A Concourse user can send a request with body including :team… |
CVE-2022-3876 | Medium | 4.3 | 2022-12-19 | A vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This issue affe… |
CVE-2022-4505 | High | 8.8 | 2022-12-15 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4097 | Medium | 5.3 | 2022-12-12 | The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP block… |
CVE-2022-38765 | Medium | 6.5 | 2022-12-09 | Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imag… |
CVE-2022-2808 | High | 8.8 | 2022-12-02 | Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. … |
CVE-2022-3995 | Medium | 4.3 | 2022-11-29 | The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient vali… |
CVE-2022-43326 | High | 7.5 | 2022-11-29 | An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbi… |
CVE-2022-24187 | High | 7.5 | 2022-11-28 | The user_id and device_id on the Ourphoto App version 1.4.1 /device/* end-points both suffer from insecure direct object reference vulnerabilities. Other end-u… |
CVE-2022-3589 | High | 8.1 | 2022-11-21 | An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have bee… |
CVE-2022-43492 | Medium | 4.3 | 2022-11-18 | Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress. |
CVE-2022-44005 | Medium | 5.3 | 2022-11-16 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the newsletter sign-up functionality is vuln… |
CVE-2022-42129 | Medium | 4.3 | 2022-11-15 | An Insecure direct object reference (IDOR) vulnerability in the Dynamic Data Mapping module in Liferay Portal 7.3.2 through 7.4.3.4, and Liferay DXP 7.3 before… |
CVE-2022-3413 | Medium | 4.3 | 2022-11-10 | Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 1… |
CVE-2022-40206 | Medium | 6.3 | 2022-11-08 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles t… |
CVE-2022-40205 | Medium | 5.4 | 2022-11-08 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles t… |
CVE-2021-36906 | Low | 2.7 | 2022-11-03 | Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress. |
CVE-2022-39945 | Medium | 5.4 | 2022-11-02 | An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an a… |
CVE-2022-39018 | High | 8.2 | 2022-10-31 | Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL. |
CVE-2022-31692 | Critical | 9.8 | 2022-10-31 | Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types… |
CVE-2022-36966 | Medium | 5.4 | 2022-10-20 | Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (I… |
CVE-2022-33077 | High | 7.5 | 2022-10-19 | An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint. |
CVE-2022-41479 | High | 7.5 | 2022-10-18 | The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r=… |
CVE-2022-3331 | Low | 3.5 | 2022-10-17 | An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions… |
CVE-2022-3282 | Medium | 4.3 | 2022-10-17 | The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from us… |
CVE-2022-42067 | Medium | 4.3 | 2022-10-14 | Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability |
CVE-2022-2828 | Medium | 6.5 | 2022-10-13 | In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerabi… |
CVE-2021-36865 | Low | 3.8 | 2022-09-30 | Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the conten… |
CVE-2022-1613 | Medium | 5.3 | 2022-09-26 | The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it po… |
CVE-2022-40186 | Critical | 9.1 | 2022-09-22 | An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an… |
CVE-2022-1580 | Medium | 4.3 | 2022-09-19 | The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contain… |
CVE-2022-2913 | Medium | 4.3 | 2022-09-16 | The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and b… |
CVE-2022-2877 | Medium | 5.3 | 2022-09-16 | The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat… |
CVE-2022-38789 | Critical | 9.1 | 2022-09-15 | An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map th… |
CVE-2022-36539 | High | 7.5 | 2022-09-07 | WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children. |
CVE-2022-32277 | Medium | 5.3 | 2022-09-06 | Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to c… |
CVE-2022-36202 | Critical | 9.8 | 2022-08-31 | Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (… |
CVE-2022-2080 | Medium | 4.3 | 2022-08-29 | The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any au… |
CVE-2022-2034 | Medium | 5.3 | 2022-08-29 | The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private… |
CVE-2022-3019 | High | 8.8 | 2022-08-29 | The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's mi… |
CVE-2021-4142 | Medium | 5.5 | 2022-08-24 | The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple conten… |
CVE-2022-34775 | Medium | 6.3 | 2022-08-22 | Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the reservation, a… |
CVE-2022-34770 | Medium | 4.6 | 2022-08-22 | Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive information such as health statements, previ… |
CVE-2022-2312 | Medium | 5.4 | 2022-08-22 | The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make logged in user with a… |
CVE-2022-2198 | Medium | 4.3 | 2022-08-22 | The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messa… |
CVE-2022-34621 | Medium | 6.5 | 2022-08-19 | Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other… |
CVE-2022-2824 | High | 8.8 | 2022-08-15 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |