Advisories · Weakness

CWE-841.

Every Advisory and CVE whose sources give the weakness CWE-841, newest first.

CVE-2025-58051 CVE record

CVSS 6.5 Medium

Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table
- nextcloud security-advisories
- CWE-841
Not analysed yet 16 Oct 2025
CVE-2025-55682 CVE record

CVSS 6.1 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-841
Not analysed yet 14 Oct 2025
CVE-2025-55337 CVE record

CVSS 6.1 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-841
Not analysed yet 14 Oct 2025
CVE-2025-55332 CVE record

CVSS 6.1 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-841
Not analysed yet 14 Oct 2025
CVE-2025-55330 CVE record

CVSS 6.1 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-841
Not analysed yet 14 Oct 2025
CVE-2024-13065 CVE record

CVSS 6.3 Medium

Business Logic Error in Akinsoft's MyRezzta
- Akinsoft MyRezzta
- Denial of service
- CWE-841
Not analysed yet 3 Sept 2025
CVE-2025-48482 CVE record

CVSS 5.3 Medium

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
CVE-2025-48481 CVE record

CVSS 6.1 Medium

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
CVE-2025-48480 CVE record

CVSS 7.0 High

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
CVE-2025-48479 CVE record

CVSS 8.5 High

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
CVE-2025-48478 CVE record

CVSS 7.0 High

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
CVE-2025-48477 CVE record

CVSS 7.1 High

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
CVE-2025-48476 CVE record

CVSS 7.1 High

FreeScout Has Business Logic Errors
- freescout
- CWE-841
Not analysed yet 30 May 2025
DotNetNuke.SiteExportImport NuGet

CVSS 3.5 Low

DNN site Import could use an external source with a crafted request
- CWE-841
<9.13.9 · fixed in 9.13.9

GHSA-62mf-vhhw-xmf8 · CVE-2025-48376 Not analysed yet 23 May 2025
CVE-2024-12543 CVE record

CVSS 5.9 Medium

A user enumeration and subsequent data integrity vulnerability affecting barcode functionality
- OpenText Content Management
- CWE-841
Not analysed yet 21 Apr 2025
CVE-2025-2323 CVE record

CVSS 5.3 Medium

274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow
- 274056675 springboot-openai-chatgpt
- CWE-840
- CWE-841
Not analysed yet 15 Mar 2025
CVE-2024-51738 CVE record

CVSS 7.7 High

Sunshine improperly enforces pairing protocol request order
- LizardByte Sunshine
- Memory corruption
- CWE-305
Not analysed yet 20 Jan 2025
CVE-2024-46307 CVE record

CVSS 7.5 High

A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.
- CWE-841
Not analysed yet 9 Oct 2024
CVE-2024-44128 CVE record

CVSS 5.5 Medium

This issue was addressed by adding an additional prompt for user consent.
- Apple macOS
- CWE-841
Not analysed yet 16 Sept 2024
aimeos/ai-controller-frontend Packagist

CVSS 5.3 Medium

ai-controller-frontend payment status in basket isn't reset
- CWE-841
<2020.10.15 || >=2021.04.1, <2021.10.8 || >=2022.04.1, <2022.10.8 || >=2023.04.1, <2023.10.9 · fixed in 2020.10.15, 2021.10.8, 2022.10.8, 2023.10.9

GHSA-m9gv-6p22-qgmj · CVE-2024-39325 Not analysed yet 5 Jul 2024
CVE-2024-6128 CVE record

CVSS 6.9 Medium

spa-cartcms Checkout Page checkout behavioral workflow
- spa-cartcms
- CWE-841
Not analysed yet 18 Jun 2024
aimeos/ai-client-html Packagist

CVSS 5.3 Medium

Digital products download without proper payment status check
- Broken access control
- CWE-841
>=2020.04.1, <2020.10.27 || >=2021.04.1, <2021.10.21 || >=2022.04.1, <2022.10.12 || >=2023.04.1, <2023.10.14 || >=2024.04.1, <2024.04.5 · fixed in 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, 2024.04.5

GHSA-v4g2-cm5v-cxv7 · CVE-2024-37296 Not analysed yet 5 Jun 2024
CVE-2024-0410 CVE record

CVSS 7.7 High

Improper Enforcement of Behavioral Workflow in GitLab
- GitLab
- CWE-841
Not analysed yet 21 Feb 2024
CVE-2023-42939 CVE record

CVSS 3.3 Low

A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- CWE-841
Not analysed yet 21 Feb 2024
CVE-2022-46710 CVE record

CVSS 5.5 Medium

A logic issue was addressed with improved checks.
- Apple macOS
- Apple iOS and iPadOS
- CWE-841
Not analysed yet 10 Jan 2024
CVE-2023-5921 CVE record

CVSS 7.1 High

Function Bypass in Geodi
- DECE Software Geodi
- CWE-841
Not analysed yet 22 Nov 2023
CVE-2023-4181 CVE record

CVSS 5.4 Medium

SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow
- SourceCodester Free Hospital Management System for Small Practices
- CWE-841
Not analysed yet 6 Aug 2023
org.keycloak:keycloak-core Maven

CVSS 6.5 Medium

Keycloak: Impersonation and lockout possible through incorrect handling of email trust
- Authentication bypass
- CWE-841
<22.0.1 · fixed in 22.0.1

GHSA-c7xw-p58w-h6fj · CVE-2023-0105 Not analysed yet 18 Jul 2023
CVE-2023-1383 CVE record

CVSS 5.4 Medium

Fire TV Stick 3rd gen: An Improper Enforcement of Behavioral Workflow vulnerability in the…
- Fire TV Stick 3rd gen
- Insignia TV with FireOS
- CWE-841
Not analysed yet 3 May 2023
org.keycloak:keycloak-core Maven

CVSS 6.5 Medium

Duplicate Advisory: Keycloak allows impersonation and lockout due to email trust not being handled correctly
- Authentication bypass
- CWE-841
<=20.0.2 · no fixed version yet

GHSA-vhvq-jh34-3fc8 Withdrawn Not analysed yet 13 Jan 2023
CVE-2022-2102 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Secheron SEPCOS Control and Protection Relay
- Secheron SEPCOS Control and Protection Relay firmware package
- CWE-841
Not analysed yet 24 Jun 2022
CVE-2022-2105 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Secheron SEPCOS Control and Protection Relay
- Secheron SEPCOS Control and Protection Relay firmware package
- CWE-841
Not analysed yet 24 Jun 2022
CVE-2022-1667 CVE record

CVSS 7.5 High

Secheron SEPCOS Control and Protection Relay
- Secheron SEPCOS Control and Protection Relay firmware package
- CWE-841
Not analysed yet 24 Jun 2022
publify_core RubyGems

CVSS 6.5 Medium

Publify Business Logic Errors
- CWE-840
- CWE-841
<9.2.7 · fixed in 9.2.7

GHSA-x3rq-r3cm-5vc4 · CVE-2022-0524 Not analysed yet 9 Feb 2022