GHSA-83X4-9CWR-5487 Improper Authorization in Keycloak

A incorrect authorization flaw was found in Keycloak 12.0.0, the flaw allows an attacker with any existing user account to create new default user accounts via the administrative REST API even where new user registration is disabled...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

Authorization

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

CVE-2021-3837 affects openwhyd/openwhyd with an Improper Authorization issue in the login flow. The vulnerability arises from insufficient validation of the redirect parameter, which is embedded in the login redirect HTML/JS (htmlRedirect) and can be used to trigger a reflected XSS or redirect-ba...

Improper Authorization in saleor/saleor

Title GraphQL traversal due to missing permission checks Description orders and customers fields allow to access each other via nodes edges. However, connections don't check user's permissions, which allows, for instance, a staff with just Customers permissions get full information about the orde...

PT-2022-10715 · Openwhyd · Openwhyd

Name of the Vulnerable Software and Affected Versions: openwhyd affected versions not specified Description: The issue concerns Improper Authorization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where...

Openwhyd 安全漏洞

Openwhyd is a music management service. openwhyd suffers from an authorization issue vulnerability that stems from the fact that openwhyd is vulnerable to improper authorization. No detailed vulnerability details are currently available...

CVE-2021-3837: Improper Authorization

openwhyd is vulnerable to Improper Authorization...

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

CVE-2021-20873

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

CVE-2021-20873: Missing Authorization

Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme. When Android apps are developed with Yappli versions since v7.3.6 and prior to v9.30.0, they are vulnerable to improper authorization in Custom URL Scheme handler, and may ...

PT-2021-14311

Name of the Vulnerable Software and Affected Versions: Yappli versions 7.3.6 through 9.29.9 Description: The issue concerns improper authorization in the Custom URL Scheme handler. When exploited, it may direct users to unintended sites via a specially crafted URL. Recommendations: For Yappli...

Names of private objects are leaked to unauthorized users via the "Move objects" feature - CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0. Affected versions:...

CVE-2021-43847: Improper Authorization

HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to become unauthorized members of private Spaces. Versions 1.10.3 and 1.9.3 contain a patch for this issue...

CVE-2021-24819: Incorrect Authorization

The Page/Post Content Shortcode WordPress plugin through 1.0 does not have proper authorisation in place, allowing users with a role as low as contributor to access draft/private/password protected/trashed posts/pages they should not be allowed to, including posts created by other users such as...