CWE-639 · Authorization Bypass Through User-Controlled Key (page 23)
Page 23 of 29 — CVEs classified under CWE-639, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44254 | Medium | 5.0 | 2024-09-10 | An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and… |
CVE-2024-45032 | Critical | 10.0 | 2024-09-10 | A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Af… |
CVE-2024-8601 | Medium | 6.5 | 2024-09-09 | This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated… |
CVE-2024-8428 | High | 8.8 | 2024-09-06 | The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions u… |
CVE-2024-1744 | High | 7.5 | 2024-09-06 | Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Computer Accord ORS allows Retrieve Embedded Sensitive Data. Th… |
CVE-2024-8292 | Critical | 9.8 | 2024-09-06 | The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and i… |
CVE-2024-8123 | Medium | 5.4 | 2024-09-04 | The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3… |
CVE-2024-45232 | Medium | 5.3 | 2024-08-29 | An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the confirmationAction, resulting in Insecu… |
CVE-2024-40395 | Medium | 6.5 | 2024-08-27 | An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, including PII, regardless of access level. |
CVE-2024-43916 | Medium | 4.3 | 2024-08-26 | Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a throug… |
CVE-2024-8158 | Medium | 6.5 | 2024-08-25 | A bug in the 9p authentication implementation within lib9p allows an attacker with an existing valid user within the configured auth server to impersonate any… |
CVE-2024-7848 | Medium | 4.3 | 2024-08-22 | The User Private Files – WordPress File Sharing Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includ… |
CVE-2024-43350 | Medium | 5.3 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in Propovoice Propovoice CRM.This issue affects Propovoice CRM: from n/a through 1.7.6.4. |
CVE-2024-43322 | Medium | 5.4 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a throug… |
CVE-2024-43315 | High | 7.5 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This issue affects Stripe Paymen… |
CVE-2024-43288 | Medium | 4.3 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in gVectors Team wpForo Forum.This issue affects wpForo Forum: from n/a through 2.3.4. |
CVE-2024-43266 | Medium | 5.4 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal.This issue affects WP Job Portal: from n/a through <=… |
CVE-2024-43239 | Medium | 4.3 | 2024-08-18 | Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from… |
CVE-2024-42464 | Medium | 6.5 | 2024-08-16 | Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resou… |
CVE-2024-42463 | Medium | 6.5 | 2024-08-16 | Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resou… |
CVE-2023-7049 | Medium | 4.3 | 2024-08-16 | The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the th… |
CVE-2024-27730 | Critical | 9.8 | 2024-08-15 | Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the cid param… |
CVE-2024-6534 | Medium | 4.3 | 2024-08-15 | Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because… |
CVE-2024-21981 | Medium | 5.7 | 2024-08-13 | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to ex… |
CVE-2024-39642 | Medium | 6.5 | 2024-08-13 | Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Accessing Functionality Not Properly Constrained by ACLs.This iss… |
CVE-2024-7658 | Medium | 5.3 | 2024-08-12 | A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file proces… |
CVE-2024-3035 | Medium | 6.8 | 2024-08-08 | A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 all… |
CVE-2024-6357 | Medium | 6.3 | 2024-08-06 | Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence. |
CVE-2024-7438 | Medium | 4.3 | 2024-08-03 | A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2024-7437 | Medium | 5.4 | 2024-08-03 | A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile… |
CVE-2024-41254 | Medium | 5.3 | 2024-07-31 | An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obta… |
CVE-2024-38701 | Medium | 4.3 | 2024-07-22 | Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4. |
CVE-2024-34457 | Medium | 6.5 | 2024-07-22 | On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view everyone's user fli… |
CVE-2024-5977 | Medium | 5.4 | 2024-07-19 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi… |
CVE-2024-5619 | Critical | 9.6 | 2024-07-18 | Authorization Bypass Through User-Controlled Key vulnerability in PruvaSoft Informatics Apinizer Management Console allows Exploiting Incorrectly Configured Ac… |
CVE-2024-38447 | High | 8.1 | 2024-07-17 | NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user). |
CVE-2024-38446 | Medium | 6.5 | 2024-07-17 | NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report t… |
CVE-2024-6410 | Medium | 4.3 | 2024-07-10 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu… |
CVE-2024-39901 | Medium | 4.2 | 2024-07-09 | OpenSearch Observability is collection of plugins and applications that visualize data-driven events. An issue in the OpenSearch observability plugins allows u… |
CVE-2024-39900 | Medium | 5.4 | 2024-07-09 | OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows uni… |
CVE-2024-39897 | Medium | 4.3 | 2024-07-09 | zot is an OCI image registry. Prior to 2.1.0, the cache driver `GetBlob()` allows read access to any blob without access control check. If a Zot `accessControl… |
CVE-2024-21759 | Medium | 4.3 | 2024-07-09 | An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorize… |
CVE-2023-3290 | Medium | 5.0 | 2024-07-09 | A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results in unauthorized dat… |
CVE-2023-3289 | High | 7.7 | 2024-07-09 | A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This results in unauthori… |
CVE-2023-3288 | High | 8.5 | 2024-07-09 | A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in privilege escalation. |
CVE-2023-3287 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege escalation. |
CVE-2023-3286 | High | 7.7 | 2024-07-09 | A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in the system. This results in unauthorized… |
CVE-2023-38055 | Critical | 9.6 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (including admi… |
CVE-2023-38054 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer). This… |
CVE-2023-38053 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} allows a low privileged user to fetch, modify or delete the settings of any user (including ad… |
CVE-2023-38052 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} allows a low privileged user to fetch, modify or delete a high privileged user (admin). This results… |
CVE-2023-38051 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary)… |
CVE-2023-38050 | Critical | 9.1 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin)… |
CVE-2023-38049 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} allows a low privileged user to fetch, modify or delete an appointment of any user (incl… |
CVE-2023-38048 | Critical | 9.9 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider). This res… |
CVE-2023-38047 | High | 8.5 | 2024-07-09 | A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} allows a low privileged user to fetch, modify or delete the category of any user (including a… |
CVE-2023-3285 | High | 7.7 | 2024-07-09 | A BOLA vulnerability in POST /appointments allows a low privileged user to create an appointment for any user in the system (including admin). This results in… |
CVE-2024-4341 | Medium | 6.5 | 2024-07-08 | Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. Thi… |
CVE-2024-39321 | High | 7.5 | 2024-07-05 | Traefik is an HTTP reverse proxy and load balancer. Versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3 have a vulnerability that allows bypassing IP allow-lists vi… |
CVE-2024-39223 | Critical | 9.8 | 2024-07-03 | An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.Insecu… |
CVE-2024-31898 | Medium | 5.4 | 2024-06-30 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure dir… |
CVE-2024-5942 | Medium | 4.3 | 2024-06-29 | The Page and Post Clone plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0 via the 'content_clone… |
CVE-2024-1107 | Critical | 9.8 | 2024-06-27 | Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2024-4874 | Medium | 4.3 | 2024-06-22 | The Bricks Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.8 via the postId parameter… |
CVE-2024-5639 | Medium | 4.3 | 2024-06-21 | The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 via the 'rest_api_c… |
CVE-2023-49112 | Medium | 6.5 | 2024-06-20 | Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" param… |
CVE-2024-4873 | Medium | 4.3 | 2024-06-19 | The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement… |
CVE-2024-37889 | Medium | 6.5 | 2024-06-14 | MyFinances is a web application for managing finances. MyFinances has a way to access other customer invoices while signed in as a user. This method allows an… |
CVE-2024-33373 | Medium | 6.3 | 2024-06-14 | An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. Th… |
CVE-2024-2472 | Critical | 9.1 | 2024-06-14 | The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start… |
CVE-2024-29181 | Low | 2.3 | 2024-06-12 | Strapi is an open-source content management system. Prior to version 4.19.1, a super admin can create a collection where an item in the collection has an assoc… |
CVE-2024-5438 | Medium | 4.3 | 2024-06-07 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includin… |
CVE-2024-5131 | Medium | 6.5 | 2024-06-06 | An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting versions up to and including 1.2.2. The vulnerability allows unau… |
CVE-2024-5130 | High | 7.5 | 2024-06-06 | An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows unauthenticated users to delete any datase… |
CVE-2024-5128 | High | 8.8 | 2024-06-06 | An Insecure Direct Object Reference (IDOR) vulnerability was identified in lunary-ai/lunary, affecting versions up to and including 1.2.2. This vulnerability a… |
CVE-2024-36399 | High | 8.2 | 2024-06-06 | Kanboard is project management software that focuses on the Kanban methodology. The vuln is in app/Controller/ProjectPermissionController.php function addUser(… |
CVE-2024-4886 | Medium | 4.3 | 2024-06-05 | The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request |
CVE-2024-4750 | Medium | 5.3 | 2024-06-04 | The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included i… |
CVE-2024-4274 | Medium | 4.3 | 2024-06-04 | The Essential Real Estate plugin for WordPress is vulnerable to unauthorized loss of data due to insufficient validation on the remove_property_attachment_ajax… |
CVE-2024-32045 | Medium | 5.9 | 2024-05-26 | Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1, 8.1.x <= 8.1.12 fail to enforce proper access controls for channel and team membership when linking a playb… |
CVE-2024-5258 | Medium | 4.4 | 2024-05-23 | An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated att… |
CVE-2024-5166 | Medium | 6.5 | 2024-05-22 | An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model. |
CVE-2024-4154 | Medium | 6.5 | 2024-05-21 | In lunary-ai/lunary version 1.2.2, an incorrect synchronization vulnerability allows unprivileged users to rename projects they do not have access to. Specific… |
CVE-2024-4151 | High | 8.1 | 2024-05-20 | An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any prompts in any projects due to insuffici… |
CVE-2024-4843 | Medium | 4.3 | 2024-05-16 | ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate… |
CVE-2024-4279 | Medium | 6.5 | 2024-05-16 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference to Arbitrary Course Deletion in ver… |
CVE-2023-40720 | High | 7.1 | 2024-05-14 | An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an auth… |
CVE-2024-4819 | Medium | 4.3 | 2024-05-14 | A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file… |
CVE-2024-4817 | Medium | 6.3 | 2024-05-14 | A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2024-33818 | High | 7.5 | 2024-05-14 | Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID parameter. |
CVE-2024-1693 | Medium | 4.3 | 2024-05-14 | The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cdm_save_cat… |
CVE-2024-4538 | High | 7.5 | 2024-05-07 | IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creati… |
CVE-2024-4537 | High | 7.5 | 2024-05-07 | IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another use… |
CVE-2024-34383 | Medium | 5.3 | 2024-05-06 | Authorization Bypass Through User-Controlled Key vulnerability in The SEO Guys at SEOPress SEOPress.This issue affects SEOPress: from n/a through 7.7.1. |
CVE-2024-2346 | Medium | 5.4 | 2024-05-02 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… |
CVE-2024-24312 | High | 7.5 | 2024-05-01 | SQL injection vulnerability in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Models/UserModel.php com… |
CVE-2024-33383 | High | 7.5 | 2024-04-30 | Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the f… |
CVE-2019-19755 | Critical | 9.1 | 2024-04-30 | ethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public I… |
CVE-2024-28320 | High | 7.6 | 2024-04-29 | Insecure Direct Object References (IDOR) vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access… |
CVE-2024-33542 | Medium | 4.3 | 2024-04-29 | Authorization Bypass Through User-Controlled Key vulnerability in Fabio Rinaldi Crelly Slider.This issue affects Crelly Slider: from n/a through 1.4.5. |