# CWE-841.

Every Advisory and CVE whose sources give the weakness CWE-841, newest first.

## Records, newest first (an older page)

- [Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table](https://agentprime.io/advisories/CVE-2025-58051.md)
  `CVE-2025-58051` · CVE record: nextcloud security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-841
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-55682.md)
  `CVE-2025-55682` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-841
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-55337.md)
  `CVE-2025-55337` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-841
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-55332.md)
  `CVE-2025-55332` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-841
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-55330.md)
  `CVE-2025-55330` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-841
- [Business Logic Error in Akinsoft's MyRezzta](https://agentprime.io/advisories/CVE-2024-13065.md)
  `CVE-2024-13065` · CVE record: Akinsoft MyRezzta · CVSS 6.3 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Denial of service, CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48482.md)
  `CVE-2025-48482` · CVE record: freescout-help-desk freescout · CVSS 5.3 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48481.md)
  `CVE-2025-48481` · CVE record: freescout-help-desk freescout · CVSS 6.1 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48480.md)
  `CVE-2025-48480` · CVE record: freescout-help-desk freescout · CVSS 7.0 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48479.md)
  `CVE-2025-48479` · CVE record: freescout-help-desk freescout · CVSS 8.5 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48478.md)
  `CVE-2025-48478` · CVE record: freescout-help-desk freescout · CVSS 7.0 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48477.md)
  `CVE-2025-48477` · CVE record: freescout-help-desk freescout · CVSS 7.1 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [FreeScout Has Business Logic Errors](https://agentprime.io/advisories/CVE-2025-48476.md)
  `CVE-2025-48476` · CVE record: freescout-help-desk freescout · CVSS 7.1 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-841
- [DNN site Import could use an external source with a crafted request](https://agentprime.io/advisories/GHSA-62mf-vhhw-xmf8.md)
  `GHSA-62mf-vhhw-xmf8`, `CVE-2025-48376` · NuGet `DotNetNuke.SiteExportImport`: affected `<9.13.9`, fixed in `9.13.9` · CVSS 3.5 Low · Not analysed yet · Published 23 May 2025 · Tags: CWE-841
- [A user enumeration and subsequent data integrity vulnerability affecting barcode functionality](https://agentprime.io/advisories/CVE-2024-12543.md)
  `CVE-2024-12543` · CVE record: OpenText OpenText Content Management · CVSS 5.9 Medium · Not analysed yet · Published 21 Apr 2025 · Tags: CWE-841
- [274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow](https://agentprime.io/advisories/CVE-2025-2323.md)
  `CVE-2025-2323` · CVE record: 274056675 springboot-openai-chatgpt · CVSS 5.3 Medium · Not analysed yet · Published 15 Mar 2025 · Tags: CWE-840, CWE-841
- [Sunshine improperly enforces pairing protocol request order](https://agentprime.io/advisories/CVE-2024-51738.md)
  `CVE-2024-51738` · CVE record: LizardByte Sunshine · CVSS 7.7 High · Not analysed yet · Published 20 Jan 2025 · Tags: Memory corruption, CWE-305, CWE-841
- [A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.](https://agentprime.io/advisories/CVE-2024-46307.md)
  `CVE-2024-46307` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-841
- [This issue was addressed by adding an additional prompt for user consent.](https://agentprime.io/advisories/CVE-2024-44128.md)
  `CVE-2024-44128` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-841
- [ai-controller-frontend payment status in basket isn't reset](https://agentprime.io/advisories/GHSA-m9gv-6p22-qgmj.md)
  `GHSA-m9gv-6p22-qgmj`, `CVE-2024-39325`, `PKSA-v62f-r496-c1kj` · Packagist `aimeos/ai-controller-frontend`: affected `<2020.10.15 || >=2021.04.1, <2021.10.8 || >=2022.04.1, <2022.10.8 || >=2023.04.1, <2023.10.9`, fixed in `2020.10.15`, `2021.10.8`, `2022.10.8`, `2023.10.9` · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2024 · Tags: CWE-841
- [spa-cartcms Checkout Page checkout behavioral workflow](https://agentprime.io/advisories/CVE-2024-6128.md)
  `CVE-2024-6128` · CVE record: spa-cartcms · CVSS 6.9 Medium · Not analysed yet · Published 18 Jun 2024 · Tags: CWE-841
- [Digital products download without proper payment status check](https://agentprime.io/advisories/GHSA-v4g2-cm5v-cxv7.md)
  `GHSA-v4g2-cm5v-cxv7`, `CVE-2024-37296`, `PKSA-7hj5-fcz5-xrrg` · Packagist `aimeos/ai-client-html`: affected `>=2020.04.1, <2020.10.27 || >=2021.04.1, <2021.10.21 || >=2022.04.1, <2022.10.12 || >=2023.04.1, <2023.10.14 || >=2024.04.1, <2024.04.5`, fixed in `2020.10.27`, `2021.10.21`, `2022.10.12`, `2023.10.14`, `2024.04.5` · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: Broken access control, CWE-841
- [Improper Enforcement of Behavioral Workflow in GitLab](https://agentprime.io/advisories/CVE-2024-0410.md)
  `CVE-2024-0410` · CVE record: GitLab GitLab · CVSS 7.7 High · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-841
- [A logic issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2023-42939.md)
  `CVE-2023-42939` · CVE record: Apple iOS and iPadOS · CVSS 3.3 Low · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-841
- [A logic issue was addressed with improved checks.](https://agentprime.io/advisories/CVE-2022-46710.md)
  `CVE-2022-46710` · CVE record: Apple macOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-841
- [Function Bypass in Geodi](https://agentprime.io/advisories/CVE-2023-5921.md)
  `CVE-2023-5921` · CVE record: DECE Software Geodi · CVSS 7.1 High · Not analysed yet · Published 22 Nov 2023 · Tags: CWE-841
- [SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow](https://agentprime.io/advisories/CVE-2023-4181.md)
  `CVE-2023-4181` · CVE record: SourceCodester Free Hospital Management System for Small Practices · CVSS 5.4 Medium · Not analysed yet · Published 6 Aug 2023 · Tags: CWE-841
- [Keycloak: Impersonation and lockout possible through incorrect handling of email trust](https://agentprime.io/advisories/GHSA-c7xw-p58w-h6fj.md)
  `GHSA-c7xw-p58w-h6fj`, `CVE-2023-0105` · Maven `org.keycloak:keycloak-core`: affected `<22.0.1`, fixed in `22.0.1` · CVSS 6.5 Medium · Not analysed yet · Published 18 Jul 2023 · Tags: Authentication bypass, CWE-841
- [Fire TV Stick 3rd gen: An Improper Enforcement of Behavioral Workflow vulnerability in the…](https://agentprime.io/advisories/CVE-2023-1383.md)
  `CVE-2023-1383` · CVE record: AmazonFire TV Stick 3rd gen Fire TV Stick 3rd gen and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2023 · Tags: CWE-841
- [Duplicate Advisory: Keycloak allows impersonation and lockout due to email trust not being handled correctly](https://agentprime.io/advisories/GHSA-vhvq-jh34-3fc8.md)
  `GHSA-vhvq-jh34-3fc8` · Maven `org.keycloak:keycloak-core`: affected `<=20.0.2`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 13 Jan 2023 · Tags: Authentication bypass, CWE-841
- [Secheron SEPCOS Control and Protection Relay](https://agentprime.io/advisories/CVE-2022-2102.md)
  `CVE-2022-2102` · CVE record: Secheron SEPCOS Control and Protection Relay firmware package · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2022 · Tags: CWE-841
- [Secheron SEPCOS Control and Protection Relay](https://agentprime.io/advisories/CVE-2022-2105.md)
  `CVE-2022-2105` · CVE record: Secheron SEPCOS Control and Protection Relay firmware package · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2022 · Tags: CWE-841
- [Secheron SEPCOS Control and Protection Relay](https://agentprime.io/advisories/CVE-2022-1667.md)
  `CVE-2022-1667` · CVE record: Secheron SEPCOS Control and Protection Relay firmware package · CVSS 7.5 High · Not analysed yet · Published 24 Jun 2022 · Tags: CWE-841
- [Publify Business Logic Errors](https://agentprime.io/advisories/GHSA-x3rq-r3cm-5vc4.md)
  `GHSA-x3rq-r3cm-5vc4`, `BIT-publify-2022-0524`, `CVE-2022-0524` · RubyGems `publify_core`: affected `<9.2.7`, fixed in `9.2.7` · CVSS 6.5 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-840, CWE-841

Newest: <https://agentprime.io/advisories/tag/cwe-841.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-841&cursor=WyIyMDI1LTExLTE2VDA2OjAyOjA1Ljc0MDAwMFoiLCJDVkUtMjAyNS0xMzIzOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-841/?cursor=WyIyMDI1LTExLTE2VDA2OjAyOjA1Ljc0MDAwMFoiLCJDVkUtMjAyNS0xMzIzOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.