Broken access control.

Nginx Proxy Manager through 2.16.0 Improper Authorization via advanced_config

• NginxProxyManager nginx-proxy-manager
• Broken access control

ZoneMinder before 1.38.4 Incorrect Authorization in frames API index

• zoneminder
• Broken access control

jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)

• Insecure deserialization
• Broken access control

>=2.11.0, <2.18.10 || >=2.19.0, <2.21.6 || >=2.22.0, <2.22.2 · fixed in 2.18.10, 2.21.6, 2.22.2

Eleveo Quality Management GWT RPC QMUtilsService UtilsService.createAndSaveAudit information disclosure

• Eleveo Quality Management
• Information disclosure
• Broken access control

InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization)

• InvoicePlane
• Broken access control

InvoicePlane: Incomplete Authorization Remediation in Users::form() Enables Primary Administrator Account Takeover via Email Reassignment and Password Recovery

• InvoicePlane
• Broken access control

Eleveo Call Recording Software Query Builder searchAction.do access control

• Eleveo Call Recording Software
• Privilege escalation
• Broken access control

Eleveo Quality Management QMBODownload information disclosure

• Eleveo Quality Management
• Information disclosure
• Broken access control

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

• Broken access control
• CWE-187

<1.13.1 || >=1.14.0, <1.14.1 · fixed in 1.13.1, 1.14.1

Webkul Bagisto Invoice Mass Status Update state authorization

• Webkul Bagisto
• Broken access control

Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

• dannymcc bluehood
• Authentication bypass
• Broken access control

WatchGuard AP Command Injection in Internal Management API Allows Command Execution

• WatchGuard AP
• Command injection
• Broken access control

WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

• WatchGuard AP
• Broken access control
• CWE-923

PMWeb encryptionhelper.dll information disclosure

• PMWeb
• Information disclosure
• Broken access control

WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

• EnterpriseDB WarehousePG
• Broken access control

Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet

• SUSE Rancher
• Authentication bypass
• Broken access control

scim-patch: Mutation of Inherited Built-in Method Objects

• Broken access control
• Prototype pollution

<0.9.2 · fixed in 0.9.2

Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload

• Acrel Electric Unet Web Service
• Broken access control
• Unrestricted file upload

Incorrect authorization in LXD storage volume API allows reading volumes from other projects

• Canonical LXD
• Broken access control

LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse

• Canonical LXD
• Broken access control

Improper Permission Assignment in Scheduler Service

• ABB Protection and control IED manager (PCM600)
• Broken access control

Improper Authorization in Enocta Educational's Enocta Platform

• Enocta Educational Technologies Inc. Enocta Platform
• Broken access control

Authenticated Broken Access Control

• Zohocorp DDI Central
• Broken access control

Thinkware U3000 TCP Service GET_STATUS information disclosure

• Thinkware U3000
• Information disclosure
• Broken access control

Thinkware U3000 TCP Service wpa_supplicant.conf get_file access control

• Thinkware U3000
• Privilege escalation
• Broken access control

Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

• Thinkware U3000
• Privilege escalation
• Broken access control

Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution

• Google Cloud Application Integration
• Broken access control

Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers

• Apache Software Foundation Apache Roller
• Broken access control

Apache Roller: OAuth authorization endpoint trusts request-supplied identity

• Apache Software Foundation Apache Roller
• Broken access control

Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

• Apache Software Foundation Apache Roller
• Broken access control

Frappe HR Permission Validation __init__.py get_attendance_requests authorization

• Frappe HR
• Broken access control

WP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients

• WP Verify API
• Broken access control

Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization

• Netcore NBR100V2
• Broken access control

Eyeplus p2pcam Service snapshot information disclosure

• Eyeplus
• Information disclosure
• Broken access control

Eyeplus ONVIF Device GetUsers information disclosure

• Eyeplus
• Information disclosure
• Broken access control

fuzui StudentInfo Password Change Endpoint moditypasswordstu authorization

• fuzui StudentInfo
• Broken access control

Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization

• Krayin laravel-crm
• Broken access control

Krayin laravel-crm acl.php access control

• Krayin laravel-crm
• Privilege escalation
• Broken access control

Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Broken access control

Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Broken access control

zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization

• zhistaredu StarTraining
• Broken access control

zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization

• zhistaredu StarTraining
• Broken access control

mathurvishal CloudClassroom-PHP-Project cross-site request forgery

• mathurvishal CloudClassroom-PHP-Project
• Cross-site request forgery (CSRF)
• Broken access control

KitchenOwl through 0.7.10 IDOR via unchecked category ID

• TomBursch kitchenowl
• Broken access control

NextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data Deletion

• NextScripts: Social Networks Auto-Poster
• Broken access control

Optima Express 8.5.0 - 8.7.5 - Unauthenticated Author Account Creation & Application Password Rotation via ihf_clear_cache

• Optima Express IDX
• Broken access control

Malcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_request

• Malcure Malware Shield — Removal, Repair, Monitor
• Broken access control

Mailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR

• Mailchimp for WooCommerce
• Broken access control

Bookly < 28.3 - Staff+ Appointment and Payment Disclosure, Modification and Deletion via IDOR

• Online Scheduling and Appointment Booking System
• Broken access control

Duplicate Advisory: vm2: NodeVM custom resolution bypasses external path boundaries

• Broken access control

<3.12.2 · fixed in 3.12.2

AzuraCast before 0.23.8 On-Demand Download Endpoint Authorization Bypass

• AzuraCast
• Broken access control

coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization

• coollabsio Coolify
• Broken access control

Missing Authorization in Kibana Leading to Unauthorized Deletion of Data

• Elastic Kibana
• Broken access control

Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data

• Elastic Kibana
• Broken access control

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

• lomart.fr UP plugin for Joomla
• Path traversal
• Broken access control

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

• lomart.fr UP plugin for Joomla
• Path traversal
• Broken access control

capgo through 12.128.2 IDOR via PUT /app icon endpoint

• Cap-go capgo.app
• Broken access control

Froxlor before 2.3.12 Authentication Bypass via EmailSender.add

• froxlor
• Broken access control

Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass

• kyverno
• Broken access control

Budibase server before 3.45.0 Cross-Tenant Information Disclosure

• budibase server
• Broken access control