CWE-639 · Authorization Bypass Through User-Controlled Key (page 30)
Page 30 of 33 — CVEs classified under CWE-639, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4505 | High | 8.8 | 2022-12-15 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4097 | Medium | 5.3 | 2022-12-12 | The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (like IP block… |
CVE-2022-38765 | Medium | 6.5 | 2022-12-09 | Canon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An authenticated user is able to gain unauthorized access to imag… |
CVE-2022-2808 | High | 8.8 | 2022-12-02 | Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. … |
CVE-2022-3995 | Medium | 4.3 | 2022-11-29 | The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient vali… |
CVE-2022-43326 | High | 7.5 | 2022-11-29 | An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbi… |
CVE-2022-24187 | High | 7.5 | 2022-11-28 | The user_id and device_id on the Ourphoto App version 1.4.1 /device/* end-points both suffer from insecure direct object reference vulnerabilities. Other end-u… |
CVE-2022-3589 | High | 8.1 | 2022-11-21 | An API Endpoint used by Miele's "AppWash" MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have bee… |
CVE-2022-43492 | Medium | 4.3 | 2022-11-18 | Auth. (subscriber+) Insecure Direct Object References (IDOR) vulnerability in Comments – wpDiscuz plugin 7.4.2 on WordPress. |
CVE-2022-44005 | Medium | 5.3 | 2022-11-16 | An issue was discovered in BACKCLICK Professional 5.9.63. Due to the use of consecutive IDs in verification links, the newsletter sign-up functionality is vuln… |
CVE-2022-42129 | Medium | 4.3 | 2022-11-15 | An Insecure direct object reference (IDOR) vulnerability in the Dynamic Data Mapping module in Liferay Portal 7.3.2 through 7.4.3.4, and Liferay DXP 7.3 before… |
CVE-2022-3413 | Medium | 4.3 | 2022-11-10 | Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 1… |
CVE-2022-40206 | Medium | 6.3 | 2022-11-08 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles t… |
CVE-2022-40205 | Medium | 5.4 | 2022-11-08 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers with subscriber or higher user roles t… |
CVE-2021-36906 | Low | 2.7 | 2022-11-03 | Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress. |
CVE-2022-39945 | Medium | 5.4 | 2022-11-02 | An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an a… |
CVE-2022-39018 | High | 8.2 | 2022-10-31 | Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL. |
CVE-2022-31692 | Critical | 9.8 | 2022-10-31 | Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types… |
CVE-2022-36966 | Medium | 5.4 | 2022-10-20 | Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (I… |
CVE-2022-33077 | High | 7.5 | 2022-10-19 | An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint. |
CVE-2022-41479 | High | 7.5 | 2022-10-18 | The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r=… |
CVE-2022-3331 | Low | 3.5 | 2022-10-17 | An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions… |
CVE-2022-3282 | Medium | 4.3 | 2022-10-17 | The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.5 does not properly check for the upload size limit set in forms, taking the value from us… |
CVE-2022-42067 | Medium | 4.3 | 2022-10-14 | Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability |
CVE-2022-2828 | Medium | 6.5 | 2022-10-13 | In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerabi… |
CVE-2021-36865 | Low | 3.8 | 2022-09-30 | Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the conten… |
CVE-2022-1613 | Medium | 5.3 | 2022-09-26 | The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it po… |
CVE-2022-40186 | Critical | 9.1 | 2022-09-22 | An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an… |
CVE-2022-1580 | Medium | 4.3 | 2022-09-19 | The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contain… |
CVE-2022-2913 | Medium | 4.3 | 2022-09-16 | The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and b… |
CVE-2022-2877 | Medium | 5.3 | 2022-09-16 | The Titan Anti-spam & Security WordPress plugin before 7.3.1 does not properly checks HTTP headers in order to validate the origin IP address, allowing threat… |
CVE-2022-38789 | Critical | 9.1 | 2022-09-15 | An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map th… |
CVE-2022-36539 | High | 7.5 | 2022-09-07 | WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children. |
CVE-2022-32277 | Medium | 5.3 | 2022-09-06 | Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to c… |
CVE-2022-36202 | Critical | 9.8 | 2022-08-31 | Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control (… |
CVE-2022-2080 | Medium | 4.3 | 2022-08-29 | The Sensei LMS WordPress plugin before 4.5.2 does not ensure that the sender of a private message is either the teacher or the original sender, allowing any au… |
CVE-2022-2034 | Medium | 5.3 | 2022-08-29 | The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions set in one of its REST endpoint, allowing unauthenticated users to access private… |
CVE-2022-3019 | High | 8.8 | 2022-08-29 | The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's mi… |
CVE-2021-4142 | Medium | 5.5 | 2022-08-24 | The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple conten… |
CVE-2022-34775 | Medium | 6.3 | 2022-08-22 | Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the reservation, a… |
CVE-2022-34770 | Medium | 4.6 | 2022-08-22 | Tabit - sensitive information disclosure. Several APIs on the web system display, without authorization, sensitive information such as health statements, previ… |
CVE-2022-2312 | Medium | 5.4 | 2022-08-22 | The Student Result or Employee Database WordPress plugin before 1.7.5 does not have CSRF in its AJAX actions, allowing attackers to make logged in user with a… |
CVE-2022-2198 | Medium | 4.3 | 2022-08-22 | The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messa… |
CVE-2022-34621 | Medium | 6.5 | 2022-08-19 | Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other… |
CVE-2022-2824 | High | 8.8 | 2022-08-15 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2535 | Medium | 5.3 | 2022-08-15 | The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unaut… |
CVE-2022-2730 | Medium | 6.5 | 2022-08-09 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2367 | High | 7.5 | 2022-08-08 | The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of… |
CVE-2022-36284 | Medium | 6.4 | 2022-08-05 | Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. Woo… |
CVE-2022-2499 | Low | 3.5 | 2022-08-05 | An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions… |
CVE-2022-1600 | Medium | 5.3 | 2022-08-01 | The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypa… |
CVE-2022-34150 | High | 7.1 | 2022-07-20 | The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which a… |
CVE-2022-33944 | Medium | 6.5 | 2022-07-20 | The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,”… |
CVE-2022-2193 | High | 7.5 | 2022-07-19 | Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbit… |
CVE-2021-24655 | High | 7.5 | 2022-07-17 | The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any… |
CVE-2022-1881 | Medium | 5.3 | 2022-07-15 | In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports fro… |
CVE-2022-30852 | Medium | 4.3 | 2022-07-08 | Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR). |
CVE-2022-1245 | Critical | 9.8 | 2022-07-08 | A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token… |
CVE-2022-31131 | Medium | 5.4 | 2022-07-06 | Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were found to be missing user account ownership… |
CVE-2022-23173 | Medium | 5.5 | 2022-07-06 | this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" t… |
CVE-2022-2243 | Medium | 5.0 | 2022-07-01 | An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authe… |
CVE-2022-31883 | High | 8.8 | 2022-06-28 | Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including t… |
CVE-2022-0624 | High | 7.3 | 2022-06-28 | Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0. |
CVE-2017-20101 | Low | 3.5 | 2022-06-27 | A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The… |
CVE-2022-1614 | High | 7.5 | 2022-06-20 | The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to byp… |
CVE-2022-31295 | High | 7.5 | 2022-06-16 | An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts. |
CVE-2022-30760 | Medium | 4.3 | 2022-06-09 | An Insecure Direct Object Reference (IDOR) issue in fn2Web in ihb eG FlexNow before 2.04.09.016 allows remote authenticated attackers to obtain sensitive stude… |
CVE-2022-31027 | Medium | 4.2 | 2022-06-09 | OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log i… |
CVE-2022-1996 | Critical | 9.1 | 2022-06-08 | Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. |
CVE-2022-29627 | Medium | 4.3 | 2022-06-02 | An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers. |
CVE-2022-1949 | High | 7.5 | 2022-06-02 | An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can… |
CVE-2022-30495 | Critical | 9.8 | 2022-05-26 | In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin… |
CVE-2022-1810 | Medium | 4.3 | 2022-05-23 | Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9. |
CVE-2022-29434 | Medium | 6.3 | 2022-05-20 | Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events. |
CVE-2022-29159 | Medium | 5.0 | 2022-05-20 | Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, and 1.6.1, an authenticated user can move… |
CVE-2022-1425 | Medium | 4.3 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the message_id of the wpqa_mes… |
CVE-2022-27247 | Medium | 5.3 | 2022-05-13 | onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full add… |
CVE-2022-1352 | Medium | 5.3 | 2022-05-11 | Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prio… |
CVE-2022-29008 | Medium | 6.5 | 2022-05-11 | An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive inform… |
CVE-2022-28986 | High | 7.5 | 2022-05-10 | LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows re… |
CVE-2022-23061 | Medium | 6.5 | 2022-05-01 | In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecur… |
CVE-2021-24800 | Medium | 4.3 | 2022-04-25 | The DW Question & Answer Pro WordPress plugin through 1.3.4 does not check that the comment to edit belongs to the user making the request, allowing any user t… |
CVE-2022-1461 | Medium | 6.5 | 2022-04-25 | Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1459 | High | 8.3 | 2022-04-25 | Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-26665 | High | 7.5 | 2022-04-18 | An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case… |
CVE-2022-29287 | Medium | 4.9 | 2022-04-16 | Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator)… |
CVE-2022-22190 | High | 7.4 | 2022-04-14 | An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a craft… |
CVE-2021-46416 | High | 8.1 | 2022-04-07 | Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling. |
CVE-2022-27108 | Medium | 4.3 | 2022-04-06 | OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet`. Any user can create a ti… |
CVE-2022-1165 | Critical | 9.1 | 2022-04-04 | The Blackhole for Bad Bots WordPress plugin before 3.3.2 uses headers such as CF-CONNECTING-IP, CLIENT-IP etc to determine the IP address of requests hitting t… |
CVE-2022-22331 | High | 7.1 | 2022-04-01 | IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an in… |
CVE-2021-38362 | Medium | 6.5 | 2022-03-30 | In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct O… |
CVE-2022-26254 | Medium | 5.3 | 2022-03-27 | WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitraril… |
CVE-2021-43957 | High | 7.5 | 2022-03-16 | Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability… |
CVE-2022-0442 | Medium | 4.3 | 2022-03-07 | The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are uniq… |
CVE-2022-25471 | High | 8.1 | 2022-03-03 | An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a craft… |
CVE-2021-41111 | Medium | 6.4 | 2022-02-28 | Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user wit… |
CVE-2022-0732 | High | 7.5 | 2022-02-24 | The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (I… |
CVE-2022-0731 | Medium | 6.5 | 2022-02-23 | Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0. |
CVE-2022-0691 | Critical | 9.8 | 2022-02-21 | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9. |