Authorization Bypass Through User-Controlled Key in emicklei/go-restful

...

CVE-2024-1107

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...

CVE-2024-1107

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68...

CVE-2024-1107 IDOR in Talya Informatics' Travel APPS

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...

CVE-2024-1107 IDOR in Talya Informatics' Travel APPS

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...

PT-2024-16735 · Talya Informatics · Talya Informatics Travel Apps

Name of the Vulnerable Software and Affected Versions: Talya Informatics Travel APPS versions prior to 17.0.68 Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows exploiting incorrectly configured access control security levels...

CVE-2024-4874

CVE-2024-4874 affects Bricks Builder for WordPress (Bricks Builder plugin) up to version 1.9.8. It is an Insecure Direct Object Reference via postId due to missing validation on a user-controlled key, enabling authenticated attackers with Contributor-level access and above to modify posts and pag...

CVE-2024-4873

The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement functionality due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level...

CVE-2024-4873 Replace Image <= 1.1.10 - Insecure Direct Object Reference

The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement functionality due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to bypassing authentication using a user-controlled key, allows attackers to circumvent existing security restrictions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to the bypassing of authentication procedures by using a user-controlled key. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

CVE-2024-35659

Authorization Bypass Through User-Controlled Key vulnerability in KiviCare.This issue affects KiviCare: from n/a through 3.6.2...

CVE-2024-35659

Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiviCare: from n/a through = 3.6.6...

CVE-2024-35659 WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability

Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiviCare: from n/a through = 3.6.6...

PT-2024-26605 · Kivicare · Kivicare

Name of the Vulnerable Software and Affected Versions: KiviCare versions 3.6.2 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in KiviCare. This vulnerability allows for unauthorized access. Recommendations: For versions 3.6.2 and...

CVE-2024-4279

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference to Arbitrary Course Deletion in versions up to, and including, 2.7.0 via the 'tutorcoursedelete' function due to missing validation on a user controlled key. This can allow...

CVE-2024-4279

Summary: CVE-2024-4279 affects Tutor LMS – eLearning and online course solution for WordPress. An insecure direct object reference vulnerability exists in the tutor_course_delete function caused by missing validation on a user-controlled key, enabling an authenticated attacker with Instructor-lev...

CVE-2023-40720

An authorization bypass through user-controlled key vulnerability CWE-639 in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests...

Fortinet FortiVoice 安全漏洞

Fortinet FortiVoice is a network communications solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiVoice that originates from an authorization bypass via a user-controlled key vulnerability that allows an authenticated attacker to read another user's SIP configuration v...

CVE-2024-34383

CVE-2024-34383 corresponds to an Authorization Bypass Through User-Controlled Key in SEOPress (WordPress plugin). Connected Red Hat and Red Hat-adjacent advisories corroborate the issue label and public description: an authorization bypass via a user-controlled key in SEOPress could affect SEOPre...

PT-2024-25843 · Seo Guys · Seopress

Name of the Vulnerable Software and Affected Versions: SEOPress versions 7.7.1 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This vulnerability affects The SEO Guys at SEOPress SEOPress. Recommendations: For SEOPress versions...