Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

CVEs (3,260)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-0691 1Url Parse Project 1Url Parse Jun 17, 2026 Feb 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
CVE-2022-0686 1Url Parse Project 1Url Parse Jun 17, 2026 Feb 20, 2022 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
CVE-2022-24979 1Mittwald 1Varnishcache Jun 17, 2026 Feb 19, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes (ESI) content element renderer component does not include an access check. This allows an unauthenticated user to rende...Show more An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes (ESI) content element renderer component does not include an access check. This allows an unauthenticated user to render various content elements, resulting in insecure direct object reference (IDOR), with the potential of exposing internal content elements.Show less
CVE-2022-25336 1Ibexa 1Ez Platform Kernel Jun 17, 2026 Feb 18, 2022 N/A· v4 5.3 MEDIUM· v3 4.3 MEDIUM· v2 Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks against image files because the image path and filename can be correctly deduced.
CVE-2022-0639 1Url Parse Project 1Url Parse Jun 17, 2026 Feb 17, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
CVE-2022-0613 2Fedoraproject Uri.js Project 2Fedora Uri.js Jun 17, 2026 Feb 16, 2022 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
CVE-2021-46249 1Scratchoauth2 Project 1Scratchoauth2 Jun 17, 2026 Feb 15, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 allows app owners to set flags that indicate whether an app is v...Show more An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 allows app owners to set flags that indicate whether an app is verified on their own apps.Show less
CVE-2022-0512 1Url Parse Project 1Url Parse Jun 17, 2026 Feb 14, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
CVE-2021-3813 1Chatwoot 1Chatwoot Jun 17, 2026 Feb 9, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.
CVE-2022-21713 3Fedoraproject GrafanaNetapp 3E Series Performance Analyzer FedoraGrafana Jun 17, 2026 Feb 8, 2022 N/A· v4 4.3 MEDIUM· v3 3.5 LOW· v2 Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an authenticate...Show more Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an authenticated attacker to view unintended data by querying for the specific team ID, `/teams/:search` will allow an authenticated attacker to search for teams and see the total number of available teams, including for those teams that the user does not have access to, and `/teams/:teamId/members` when editors_can_admin flag is enabled, an authenticated attacker can see unintended data by querying for the specific team ID. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.Show less
CVE-2021-25096 1Ip2location 1Country Blocker Jun 17, 2026 Feb 7, 2022 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL
CVE-2022-22832 1Servisnet 1Tessa Jun 17, 2026 Feb 6, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
CVE-2021-41608 1Classapps 1Selectsurvey.net Jun 17, 2026 Jan 28, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of th...Show more A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1.Show less
CVE-2022-22828 1Synametrics 1Synaman Jun 17, 2026 Jan 27, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string.
CVE-2022-23856 1Saviynt 1Enterprise Identity Cloud Jun 17, 2026 Jan 24, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can enumerate users by changing the id parameter, such as for the ECM/maintenance/forgotpasswordstep1 URI.
CVE-2022-0266 1Livehelperchat 1Live Helper Chat Jun 17, 2026 Jan 19, 2022 N/A· v4 6.6 MEDIUM· v3 6.0 MEDIUM· v2 Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
CVE-2021-44836 1Deltarm 1Delta Rm Jun 17, 2026 Jan 18, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID paramet...Show more An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened.Show less
CVE-2021-3965 1Hp 27Designjet T1530 L2y23a Firmware Designjet T1530 L2y24a FirmwareDesignjet T1530 L2y24b Firmware+24 more Jun 17, 2026 Jan 14, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Certain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow viewing and downloading of print job previews.
CVE-2021-3852 1Weseek 1Growi Jun 17, 2026 Jan 12, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 growi is vulnerable to Authorization Bypass Through User-Controlled Key
CVE-2021-45428 1Telesquare 1Tlr 2005ksh Firmware Jun 17, 2026 Jan 3, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats.

Previous 1...152153154...163 Next