Broken access control.

lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId

• dromara lamp-cloud
• Broken access control

TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save

• TDuckCloud tduck-survey-form
• Broken access control

lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById

• dromara lamp-cloud
• Broken access control

TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create

• TDuckCloud tduck-survey-form
• Broken access control

TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey}

• TDuckCloud tduck-survey-form
• Broken access control

LavaLite CMS through 10.1.2 Authorization Bypass via User Update API

• lavalite cms
• Broken access control

Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes

• opensource-socialnetwork
• Broken access control

Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy

• Apache Software Foundation Apache SkyWalking BanyanDB
• Broken access control

Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

• Dassault Systèmes Tuleap Enterprise Edition
• Broken access control

MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation

• MikroTik RouterOS
• Broken access control

WordPress WP User Manager plugin <= 2.9.22 - Broken Access Control vulnerability

• WP User Manager
• Broken access control

WordPress Flexible Subscriptions plugin <= 1.8.4 - Broken Access Control vulnerability

• WP Desk Flexible Subscriptions
• Broken access control

WordPress Products Restricted Users for WooCommerce plugin <= 0.7 - Broken Access Control vulnerability

• Codection Products Restricted Users for WooCommerce
• Broken access control

WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability

• NOUS Ouvert Utile et Simple Event post
• Broken access control

WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability

• VillaTheme TMDS
• Broken access control

WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability

• VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex
• Broken access control

WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability

• NOUS Ouvert Utile et Simple Event post
• Broken access control

SEMCMS SEMCMS_User.php user improper authorization

• SEMCMS
• Privilege escalation
• Broken access control

WMCMS index.php information disclosure

• WMCMS
• Information disclosure
• Broken access control

tsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure

• tsi-coop tsi-dpdp-cms
• Information disclosure
• Broken access control

WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_delete_all_comment

• WP Comment Cleaner
• Broken access control

Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR

• Hotel Booking
• Broken access control

Foreman: domain and subnet interface api skips host search filters

• Red Hat Satellite 6
• Broken access control

Foreman: api filter lookup ignores a search-limited filter permission

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Broken access control

Improper access control in Samsung Mobile Samsung Internet

• Samsung Mobile Samsung Internet
• Broken access control

Incorrect default permissions in Samsung Mobile Samsung Flow

• Samsung Mobile Samsung Flow
• Broken access control

Improper access control in Samsung Mobile Devices

• Samsung Mobile Devices
• Broken access control

Improper access control in Samsung Mobile Devices

• Samsung Mobile Devices
• Broken access control

prasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload

• prasathmani TinyFileManager
• Broken access control
• Unrestricted file upload

yangzongzhuan RuoYi cross-site request forgery

• yangzongzhuan RuoYi
• Cross-site request forgery (CSRF)
• Broken access control

ZKTeco BioTime Employee REST API employees authorization

• ZKTeco BioTime
• Broken access control

ZKTeco BioTime Biometric Data Endpoint finger_data authorization

• ZKTeco BioTime
• Broken access control

ZKTeco BioTime System Settings API systemSettings access control

• ZKTeco BioTime
• Privilege escalation
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUserId

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUsername

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppConfig

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositionUser

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartChargePerson

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/datarule

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnnouncement

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths

• JeecgBoot
• Broken access control

iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resume Endpoint

• iflytek astron-agent
• Broken access control

APIPark through 1.9.7-beta IDOR via application authorization endpoints

• APIPark
• Broken access control

UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key AppKey Minting

• UnicomAI Wanwu
• Broken access control