Broken access control.

Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk Action

• Essential Addons for Elementor
• Broken access control

Authentication Source Verification Issue in Okta Access Gateway

• Okta Access Gateway
• Authentication bypass
• Broken access control

Control panel only administrator privilege escalation through sandbox allowed "getOwners(criteria)"

• Broken access control

Published by the maintainers · not yet reviewed by GitHub

>=5.8.17, <5.11.2 · fixed in 5.11.2

Ipa: freeipa: freeipa uses subject cn as proof of certificate ownership

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Broken access control

Jitsu Console before 2.14.0-beta.41 Cross-Workspace Authorization Bypass via sources/state API

• jitsu
• Broken access control

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy

• lxc incus
• Broken access control

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}

• lxc incus
• Broken access control

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh

• lxc incus
• Broken access control

OpenBao 2.5.0 before 2.6.2 PKI allowed_ip_sans_cidr Bypass via CSR IP SANs

• openbao
• Broken access control

OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs

• openbao
• Broken access control

OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal

• openbao
• Broken access control

OpenBao before 2.6.3 Missing Header Check on Agent/Proxy Quit Endpoints

• openbao
• Broken access control

OpenBao before 2.6.3 ACL Bypass via Dropped Templated Policy Denial

• openbao
• Broken access control

Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accounts

• Roskus Prospero Flow CRM
• Broken access control

Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface

• Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
• Broken access control

SmileCDR HAPI FHIR unauthorized read

• SmileCDR HAPI FHIR
• Broken access control

SmileCDR HAPI FHIR unauthorized read via subscription

• SmileCDR HAPI FHIR
• Broken access control

SmileCDR HAPI FHIR trusted tenant partition override

• SmileCDR HAPI FHIR
• Broken access control

Missing authorization in the unit resources download route in Juju controllers

• Canonical Juju
• Broken access control

Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive

• Broken access control
• CWE-178

>=3.0.0 || >=4.0.0, <4.6.2 · fixed in 4.6.2

Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes

• Broken access control
• CWE-436

>=3.11.0, <3.21.4 || >=4.0.0, <4.4.4 · fixed in 3.21.4, 4.4.4

Incorrect authorization checks in Amazon Athena engine version 3 query processing

• AWS Amazon Athena
• Broken access control
• CWE-653

Electron: Extension tabs.query returns tab URLs and titles without the tabs permission

• Broken access control

<42.11.1 || >=43.0.0-alpha.1, <43.5.1 || >=44.0.0-alpha.1, <44.1.1 || >=45.0.0-alpha.1, <45.0.0-alpha.4 · fixed in 42.11.1, 43.5.1, 44.1.1, 45.0.0-alpha.4

DataApp links without login expose job information to other user in KNIME Business Hub

• KNIME Business Hub
• Broken access control

Missing authorization in Devolutions Server

• Devolutions Server
• Broken access control

Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization

• Broken access control

>=2.0.0, <2.6.0 · fixed in 2.6.0

Incorrect authorization in Devolutions Server

• Devolutions Server
• Broken access control

Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries

• MarcosCamara01 Ecommerce Template
• Broken access control

OCO-Server: Self-Service Portal uninstall-job authorization bypass

• schorschii OCO-Server
• Broken access control

WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability

• Cozmoslabs Paid Member Subscriptions
• Broken access control

Lotus through 0.10.2 Authorization Bypass via switch_organization Endpoint

• lotus
• Broken access control

Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSet

• lotus
• Broken access control

QloApps through 1.7.0 IDOR via OrderDetailController Refund Request

• Webkul QloApps
• Broken access control

Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup

• gravitl netmaker
• Broken access control

EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API

• evershop
• Broken access control

Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers

• bytebase
• Broken access control

Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

• bytebase
• Broken access control

WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability

• yoomoney ЮKassa для WooCommerce
• Broken access control

WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability

• Ahmad Majestic Support
• Broken access control

WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability

• miniOrange Page Restriction WordPress (WP)
• Broken access control

WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

• WP Sunshine Sunshine Photo Cart
• Broken access control

WatchGuard Agent Incorrect Permission Assignment in Log Directory Allows Local Log Tampering

• WatchGuard Agent
• Broken access control

Endpoint Security Cleartext Storage of FileVault Recovery Key in Log File

• WatchGuard Agent
• Information disclosure
• Broken access control

WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability

• ACF Extended
• Broken access control

WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

• Brainstorm Force SureDash
• Broken access control

WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

• Brainstorm Force SureDash
• Broken access control

WordPress myCred plugin <= 4.0.0-beta.1 - Insecure Direct Object References (IDOR) vulnerability

• myCred
• Broken access control

WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability

• IdeaBox Creations PowerPack Addons for Elementor
• Broken access control

WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

• WP Chill Strong Testimonials
• Broken access control

WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

• eLightUp Falcon – WordPress Optimizations & Tweaks
• Broken access control

WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

• Wpmet Metform
• Broken access control

WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability

• Kings Plugins MarketKing
• Broken access control

WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerability

• DigitalME eRoom
• Broken access control

MasterStudy LMS 3.7.13 - 3.7.54 - Instructor+ Arbitrary User Display Name Update via Student Enrollment

• MasterStudy LMS WordPress Plugin
• Broken access control

Photo Engine < 6.5.8 - Author+ Arbitrary Attachment Deletion via IDOR

• Photo Engine (Media Organizer & Lightroom)
• Broken access control

MB Custom Post Types & Custom Taxonomies 2.4.0 - 2.12.2 - Contributor+ Post Type Definition and Non-Public Post Metadata Disclosure via Export

• MB Custom Post Types & Custom Taxonomies
• Broken access control

MB Custom Post Types & Custom Taxonomies 2.0.2 - 2.12.2 - Unauthenticated Settings Reset via 'mbcpt-force' Parameter

• MB Custom Post Types & Custom Taxonomies
• Broken access control

Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update

• Infility Global
• Broken access control

FluentCart < 2.2.0 - Unauthenticated Customer Address Disclosure via IDOR

• FluentCart A New Era of eCommerce
• Broken access control

OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints

• openremote
• Broken access control