CVE-2026-110763

lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint that skips URI permission checks. Authenticated low-privilege users can iterate sequential employeeId values to read every employee's...

CVE-2026-110763

The lamp-boot framework (versions 4.16.0-java17 through 4.21.2-java17 ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the oauth module . The issue exists in the /anyone/findDeptByCompany endpoint, which fails to perform proper URI permission checks. This flaw allows aut...

PT-2026-114127

Name of the Vulnerable Software and Affected Versions lamp-boot versions 4.16.0-java17 through 4.21.2-java17 Description An insecure direct object reference issue exists in the oauth module's '/anyone/findDeptByCompany' endpoint. The system fails to perform URI permission checks, allowing...

CVE-2025-40905

WWW::OAuth 1.000 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions...

Drupal Simple OAuth (OAuth2) & OpenID Connect module 6.0.0-6.0.6 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by coffeemakr in WordPress Module Simple OAuth OAuth2 & OpenID Connect versions 6.0.0-6.0.6...

io.buji:buji-pac4j (>=2.0.0, <=2.0.1), net.binggl:ninja-google-oauth-module (1.0.5) +97 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.1)

org.pac4j:pac4j-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j =2.0.0, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3,...

Drupal OAuth Module Access Bypass Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An access bypass vulnerability exists in the Drupal OAuth module. Allows an attacker to bypass certain securit...

CVE-2017-10805

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users...

CVE-2017-10805

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users...

CVE-2017-10805

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users...

CVE-2017-10805: Incorrect Authorization

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows remote authenticated users to hijack OAuth sessions of other users...

PT-2017-11516

Name of the Vulnerable Software and Affected Versions Odoo versions 8.0, 9.0, and 10.0 Odoo Community Edition versions 9.0 and 10.0 Odoo Enterprise Edition versions 9.0 and 10.0 Description The issue is related to incorrect access control on OAuth tokens in the OAuth module, allowing remote...

Drupal OAuth Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.OAuth is one of the third-party modules that enables you to authenticate requests using the OAuth 1.a protocol. An access bypass vulnerability exists in the Drupal OAuth module. An...