Advisories · Weakness
CWE-647.
Every Advisory and CVE whose sources give the weakness CWE-647, newest first.
- CVSS 8.8 High
Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR
- Splunk SOAR
- CWE-647
- CVSS 6.3 Medium
Apache APISIX: Servlet-style normalization creates a route/upstream authorization mismatch
- Apache Software Foundation Apache APISIX
- CWE-647
- CVSS 3.7 Low
Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…
- Dell Secure Connect Gateway (SCG) Policy Manager
- CWE-647
- CVSS 5.3 Medium
Envoy: Path normalization does not handle dot and dotdot segments with parameters
- envoy
- CWE-647
- CVSS 8.9 High
Incorrect authorization in Eclipse Foundation Eclipse Arrowhead
- Eclipse Foundation Eclipse Arrowhead
- Broken access control
- CWE-647
- CVSS 4.2 Medium
L7 intention authorization bypass via custom public listener
- HashiCorp Consul
- HashiCorp Consul Enterprise
- CWE-647
- CVSS 6.5 Medium
Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources
- CWE-647
>=0.6.9, <0.14.1 · fixed in 0.14.1
GHSA-c534-2w9c-x7fm - CVSS 5.3 Medium
Eclipse Jetty: Path parameter traversal
- CWE-647
>=12.0.0, <12.0.35 || >=12.1.0, <12.1.9 · fixed in 12.0.35, 12.1.9
GHSA-w7x5-g22v-xqhr · CVE-2026-8384 - CVSS 8.1 High
File Browser: Colliding username normalization gives two users the same home directory
- CWE-647
- CWE-706
<2.63.17 · fixed in 2.63.17
GHSA-7rc3-g7h6-22m7 · CVE-2026-62685 - CVSS 8.2 High
Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch
- CWE-647
>=6.4.7, <6.4.8 · fixed in 6.4.8
GHSA-vj59-8hwv-xxmv · CVE-2026-59731 - CVSS 2.3 Low
Cargo can be coerced to share credentials between registries
- CWE-647
<0.97.0 · fixed in 0.97.0
GHSA-p688-r7jv-fm6f · CVE-2026-5222 - CVSS 6.7 Medium
Aap-gateway: improper path validation in gateway allows credential exfiltration
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- CWE-647
- CVSS 6.5 Medium
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
- CWE-647
<5.15.8 · fixed in 5.15.8
GHSA-whqg-ppgf-wp8c · CVE-2025-66202 - CVSS 7.3 High
Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass
- CWE-647
<5.4.50 || >=6.0.0, <6.4.29 || >=7.0.0, <7.3.7 · fixed in 5.4.50, 6.4.29, 7.3.7
GHSA-3rg7-wf37-54rm · CVE-2025-64500 - CVSS 4.0 Medium
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
- CWE-647
<0.1.45 · fixed in 0.1.45
GHSA-x39x-9qw5-ghrf · CVE-2025-47241 - CVSS 9.3 Critical
Duplicate Advisory: `allowed_domains` can be bypassed by putting a decoy domain in http auth username portion of a URL
- CWE-647
<0.1.45 · fixed in 0.1.45
GHSA-f54f-hr32-586f - CVSS 3.4 Low
api.sonos.com: Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used…
- api.sonos.com
- CWE-647
- CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
- Hitachi Vantara Pentaho Business Analytics Server
- CWE-647