CWE-639 Authorization Bypass Through User-Controlled Key
baseThe system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (3337)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-55255US | —OT critical | KEV | ||
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoin… | ||||
| CVE-2023-6875US | critical9.8OT critical | Exploit | ||
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to unauthorized access of data and modification… | ||||
| CVE-2021-45428US | critical9.8 | Exploit | ||
TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats. | ||||
| CVE-2019-13360US | critical9.8 | Exploit | ||
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username. | ||||
| CVE-2019-17382US | critical9.1 | — | ||
An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then creat… | ||||
| CVE-2022-22832US | critical9.8 | Exploit | ||
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request. | ||||
| CVE-2019-6716US | critical9.4 | Exploit | ||
An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Act… | ||||
| CVE-2026-34444US | critical10.0 | Exploit | ||
Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in function… | ||||
| CVE-2024-50483US | critical9.8 | Exploit | ||
Authorization Bypass Through User-Controlled Key vulnerability in Tareq Hasan Meetup meetup allows Privilege Escalation.This issue affects Meetup: from n/a through <= 0.1. | ||||
| CVE-2022-31692US | critical9.8OT high | Exploit | ||
Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types. Specifically, an app… | ||||
| CVE-2019-13605US | high8.8 | Exploit | ||
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid use… | ||||
| CVE-2026-97657US | critical9.8 | Exploit | ||
The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including… | ||||
| CVE-2024-10654US | critical9.1 | Exploit | ||
A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth… | ||||
| CVE-2014-8356US | high8.8 | Exploit | ||
The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended access restrictions via a modified server response, related t… | ||||
| CVE-2026-93399US | critical9.1 | Exploit | ||
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'bookly_get_form_id', 'bookly_render_complete', 'bo… | ||||
| CVE-2022-38789US | critical9.1 | Exploit | ||
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Ins… | ||||
| CVE-2024-50395US | high8.8 | Exploit | ||
An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network atta… | ||||
| CVE-2024-0264US | critical9.8 | — | ||
A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php.… | ||||
| CVE-2023-46478US | high8.8 | Exploit | ||
An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data parameter. | ||||
| CVE-2020-10130US | high8.8 | Exploit | ||
SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system. | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan