CWE-425 Direct Request ('Forced Browsing')
baseThe web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (413)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45195US | high7.5OT critical | KEV | ||
Direct Request ('Forced Browsing') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 18.12.16.
Users are recommended to upgrade to version 18.12.16, which fi… | ||||
| CVE-2021-26085US | medium5.3OT critical | KEV | ||
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint.… | ||||
| CVE-2024-0204US | critical9.8 | Exploit | ||
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. | ||||
| CVE-2018-19207US | critical9.8 | Exploit | ||
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishan… | ||||
| CVE-2017-17736US | critical9.8 | Exploit | ||
Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS A… | ||||
| CVE-2012-0013US | high9.3 | Exploit | ||
Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R… | ||||
| CVE-2007-1644US | high10.0OT high | Exploit | ||
The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployments or configurations, which allows remote… | ||||
| CVE-2021-40875US | high7.5 | Exploit | ||
Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on the client side of a G… | ||||
| CVE-2017-14244US | critical9.8 | Exploit | ||
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings… | ||||
| CVE-2019-14927US | high7.5OT high | Exploit | ||
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configuration download vulnera… | ||||
| CVE-1999-0512US | high10.0 | Exploit | ||
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. | ||||
| CVE-2021-46378US | high7.5 | Exploit | ||
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download. | ||||
| CVE-2019-12583US | critical9.1 | — | ||
Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the acco… | ||||
| CVE-2020-35391US | medium6.5 | Exploit | ||
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/Route… | ||||
| CVE-2019-17503US | medium5.3 | Exploit | ||
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contain… | ||||
| CVE-2019-14347US | high8.8 | Exploit | ||
Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a… | ||||
| CVE-2018-16706US | high7.5 | Exploit | ||
LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. | ||||
| CVE-2002-1798US | critical9.1 | Exploit | ||
MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to (1) upload arbitrary php files via a direct request to admin/upload.php or (2) access sensitive information via a di… | ||||
| CVE-2021-42671US | high7.5 | Exploit | ||
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulner… | ||||
| CVE-2018-16060US | high7.5 | Exploit | ||
Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI. | ||||
03
attack patterns (5)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan