CWE-639 · Authorization Bypass Through User-Controlled Key (page 27)
Page 27 of 29 — CVEs classified under CWE-639, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30760 | Medium | 4.3 | 2022-06-09 | An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive stude… |
CVE-2022-31027 | Medium | 4.2 | 2022-06-09 | OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log i… |
CVE-2022-1996 | Critical | 9.1 | 2022-06-08 | Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. |
CVE-2022-29627 | Medium | 4.3 | 2022-06-02 | An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers. |
CVE-2022-1949 | High | 7.5 | 2022-06-02 | An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can… |
CVE-2022-30495 | Critical | 9.8 | 2022-05-26 | In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin… |
CVE-2022-1810 | Medium | 4.3 | 2022-05-23 | Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9. |
CVE-2022-29434 | Medium | 6.3 | 2022-05-20 | Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events. |
CVE-2022-29159 | Medium | 5.0 | 2022-05-20 | Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, and 1.6.1, an authenticated user can move… |
CVE-2022-1425 | Medium | 4.3 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the message_id of the wpqa_mes… |
CVE-2022-27247 | Medium | 5.3 | 2022-05-13 | onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full add… |
CVE-2022-1352 | Medium | 5.3 | 2022-05-11 | Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prio… |
CVE-2022-29008 | Medium | 6.5 | 2022-05-11 | An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive inform… |
CVE-2022-28986 | High | 7.5 | 2022-05-10 | LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows re… |
CVE-2022-23061 | Medium | 6.5 | 2022-05-01 | In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecur… |
CVE-2021-24800 | Medium | 4.3 | 2022-04-25 | The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user t… |
CVE-2022-1461 | Medium | 6.5 | 2022-04-25 | Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1459 | High | 8.3 | 2022-04-25 | Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-26665 | High | 7.5 | 2022-04-18 | An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case… |
CVE-2022-29287 | Medium | 4.9 | 2022-04-16 | Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator)… |
CVE-2022-22190 | High | 7.4 | 2022-04-14 | An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a craft… |
CVE-2021-46416 | High | 8.1 | 2022-04-07 | Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling. |
CVE-2022-27108 | Medium | 4.3 | 2022-04-06 | OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet`. Any user can create a ti… |
CVE-2022-1165 | Critical | 9.1 | 2022-04-04 | The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address of requests hitting t… |
CVE-2022-22331 | High | 7.1 | 2022-04-01 | IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an in… |
CVE-2021-38362 | Medium | 6.5 | 2022-03-30 | In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct O… |
CVE-2022-26254 | Medium | 5.3 | 2022-03-27 | WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitraril… |
CVE-2021-43957 | High | 7.5 | 2022-03-16 | Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability… |
CVE-2022-0442 | Medium | 4.3 | 2022-03-07 | The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are uniq… |
CVE-2022-25471 | High | 8.1 | 2022-03-03 | An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a craft… |
CVE-2021-41111 | Medium | 6.4 | 2022-02-28 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user wit… |
CVE-2022-0732 | High | 7.5 | 2022-02-24 | The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (I… |
CVE-2022-0731 | Medium | 6.5 | 2022-02-23 | Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0. |
CVE-2022-0691 | Critical | 9.8 | 2022-02-21 | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9. |
CVE-2022-0686 | Critical | 9.1 | 2022-02-20 | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8. |
CVE-2022-24979 | Medium | 5.3 | 2022-02-19 | An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes (ESI) content element renderer component does not include… |
CVE-2022-25336 | Medium | 5.3 | 2022-02-18 | Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files bec… |
CVE-2022-0639 | Medium | 5.3 | 2022-02-17 | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7. |
CVE-2022-0613 | Medium | 6.5 | 2022-02-16 | Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8. |
CVE-2021-46249 | Medium | 6.5 | 2022-02-15 | An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 all… |
CVE-2022-0512 | Medium | 5.3 | 2022-02-14 | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6. |
CVE-2021-3813 | Medium | 6.5 | 2022-02-09 | Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2. |
CVE-2022-21713 | Medium | 4.3 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle us… |
CVE-2021-25096 | Medium | 6.5 | 2022-02-07 | The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL |
CVE-2022-22832 | Critical | 9.8 | 2022-02-06 | An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request. |
CVE-2021-41608 | High | 7.5 | 2022-01-28 | A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to ret… |
CVE-2022-22828 | High | 7.5 | 2022-01-27 | An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modifie… |
CVE-2022-23856 | Medium | 5.3 | 2022-01-24 | An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM… |
CVE-2022-0266 | Medium | 6.6 | 2022-01-19 | Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v. |
CVE-2021-44836 | Medium | 4.3 | 2022-01-18 | An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to… |
CVE-2021-3965 | High | 7.5 | 2022-01-14 | Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews. |
CVE-2021-3852 | High | 7.5 | 2022-01-12 | growi is vulnerable to Authorization Bypass Through User-Controlled Key |
CVE-2021-45428 | Critical | 9.8 | 2022-01-03 | TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CG… |
CVE-2021-44160 | High | 7.3 | 2021-12-29 | Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire another general user’s privilege by modifyin… |
CVE-2021-40579 | Medium | 6.5 | 2021-12-28 | https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact… |
CVE-2021-24739 | High | 8.1 | 2021-12-21 | The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other user… |
CVE-2021-43828 | High | 7.5 | 2021-12-14 | PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management (IDOR) has been fo… |
CVE-2021-43820 | High | 7.4 | 2021-12-14 | Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performan… |
CVE-2021-44949 | Critical | 9.8 | 2021-12-14 | glFusion CMS 1.7.9 is affected by an access control vulnerability via /public_html/users.php. |
CVE-2021-39934 | Medium | 4.3 | 2021-12-13 | Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions starting 12.10 before 14.3.6, all version… |
CVE-2021-39916 | Medium | 4.3 | 2021-12-13 | Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the configuration of any External Status Check… |
CVE-2021-3964 | Medium | 5.9 | 2021-12-01 | elgg is vulnerable to Authorization Bypass Through User-Controlled Key |
CVE-2021-3992 | Medium | 6.5 | 2021-12-01 | kimai2 is vulnerable to Improper Access Control |
CVE-2021-36329 | Medium | 6.5 | 2021-11-30 | Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this v… |
CVE-2021-24892 | High | 8.8 | 2021-11-23 | Insecure Direct Object Reference in edit function of Advanced Forms (Free & Pro) before 1.6.9 allows authenticated remote attacker to change arbitrary user's e… |
CVE-2021-22967 | High | 7.5 | 2021-11-19 | In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If Allowed to Add Message to a Conversation.To r… |
CVE-2021-22951 | High | 7.5 | 2021-11-19 | Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) prior to version 8.5.7. Concrete CMS now… |
CVE-2021-3380 | Medium | 6.5 | 2021-11-10 | Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality. |
CVE-2021-24840 | Medium | 5.3 | 2021-11-08 | The Squaretype WordPress theme before 3.0.4 allows unauthenticated users to manipulate the query_vars used to retrieve the posts to display in one of its REST… |
CVE-2021-41307 | High | 7.5 | 2021-10-26 | Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via… |
CVE-2021-41306 | High | 7.5 | 2021-10-26 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Obj… |
CVE-2021-41305 | High | 7.5 | 2021-10-26 | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure D… |
CVE-2021-39225 | High | 8.1 | 2021-10-25 | Nextcloud is an open-source, self-hosted productivity platform. A missing permission check in Nextcloud Deck before 1.2.9, 1.4.5 and 1.5.3 allows another authe… |
CVE-2021-36389 | High | 7.5 | 2021-10-14 | In Yellowfin before 9.6.1 it is possible to enumerate and download uploaded images through an Insecure Direct Object Reference vulnerability exploitable by sen… |
CVE-2021-36388 | High | 7.5 | 2021-10-14 | In Yellowfin before 9.6.1 it is possible to enumerate and download users profile pictures through an Insecure Direct Object Reference vulnerability exploitable… |
CVE-2021-36387 | Medium | 5.4 | 2021-10-14 | In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP PO… |
CVE-2021-20599 | Critical | 9.1 | 2021-10-14 | Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCP… |
CVE-2021-41129 | High | 8.1 | 2021-10-06 | Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. A malicious user can modify the contents of a `confirmation_token`… |
CVE-2021-41120 | High | 7.5 | 2021-10-05 | sylius/paypal-plugin is a paypal plugin for the Sylius development platform. In affected versions the URL to the payment page done after checkout was created w… |
CVE-2021-39889 | Medium | 4.3 | 2021-10-05 | In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to… |
CVE-2021-37777 | High | 7.5 | 2021-10-04 | Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowin… |
CVE-2021-37331 | Medium | 5.3 | 2021-10-04 | Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and v… |
CVE-2021-41847 | High | 8.8 | 2021-10-01 | An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with login credentials assigned to a specifi… |
CVE-2021-41301 | Critical | 9.8 | 2021-09-30 | ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will e… |
CVE-2021-41298 | High | 8.8 | 2021-09-30 | ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied… |
CVE-2021-36874 | High | 7.1 | 2021-09-27 | Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5). |
CVE-2021-29773 | Medium | 5.4 | 2021-09-15 | IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure di… |
CVE-2021-38624 | Medium | 6.5 | 2021-09-15 | Windows Key Storage Provider Security Feature Bypass Vulnerability |
CVE-2021-40355 | High | 8.8 | 2021-09-14 | A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.8), Teamcenter V13.0 (All versions < V13.0.0.7), Teamcenter V13.1 (All versions… |
CVE-2021-37184 | Critical | 9.8 | 2021-09-14 | A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user… |
CVE-2021-33981 | Medium | 4.3 | 2021-09-08 | An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remo… |
CVE-2021-37628 | High | 7.5 | 2021-09-07 | Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link shares in Nextclou… |
CVE-2021-37631 | Medium | 6.5 | 2021-09-07 | Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected vers… |
CVE-2021-37630 | Medium | 6.5 | 2021-09-07 | Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user t… |
CVE-2021-36032 | High | 8.3 | 2021-09-01 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An au… |
CVE-2021-40352 | Medium | 6.5 | 2021-09-01 | OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users. |
CVE-2021-22023 | High | 7.2 | 2021-08-30 | The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Op… |
CVE-2021-24562 | High | 7.5 | 2021-08-23 | The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing… |
CVE-2021-37709 | Medium | 6.5 | 2021-08-16 | Shopware is an open source eCommerce platform. Versions prior to 6.4.3.1 contain a vulnerability involving an insecure direct object reference of log files of… |
CVE-2021-37215 | Medium | 4.3 | 2021-08-09 | The employee management page of Flygo contains an Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote at… |