CWE-425

Direct Request ('Forced Browsing')

Parent: CWE-862 - Missing Authorization

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

223 vulnerabilities with CWE-425
CVE-2023-28160 MEDIUM
Firefox < 111 - Info Disclosure
CVSS 6.5
CVE-2023-2524 MEDIUM
Control iD RHiD 23.3.19.0 - Open Redirect
CVSS 6.3
CVE-2023-1699 MEDIUM
Rapid7 Nexpose <6.6.187 - Forced Browsing
CVSS 4.3
CVE-2023-1663 MEDIUM
Coverity <2023.3.2 - Info Disclosure
CVSS 6.5
CVE-2023-1682 MEDIUM
Xunrui CMS 4.61 - SSRF
CVSS 4.3
CVE-2022-43110 CRITICAL
Voltronic Power ViewPower <1.04-21353 & PowerShield Netguard <1.04-...
CVSS 9.8
CVE-2022-42438 HIGH
IBM Cloud Pak for Multicloud Management Monitoring <2.4 - Info Disc...
CVSS 7.5
CVE-2022-47700 HIGH
COMFAST CF-WR623N <V2.3.0.1 - Auth Bypass
CVSS 7.5
CVE-2022-4057 MEDIUM
Autoptimize <3.1.0 - Info Disclosure
CVSS 5.3
CVE-2022-42953 HIGH
ZKTeco <8.88 - Info Disclosure
CVSS 7.5
CVE-2022-25626 MEDIUM
Identity Manager - Info Disclosure
CVSS 5.3
CVE-2022-45276 CRITICAL
YJCMS 1.0.9 - Info Disclosure
CVSS 9.8
CVE-2022-40845 MEDIUM
Tenda AC1200 Router W15Ev2 V15.11.0.10(1576) - Info Disclosure
CVSS 6.5
CVE-2022-42197 MEDIUM
Simple Exam Reviewer Management System <1.0 - Privilege Escalation
CVSS 6.5
CVE-2022-42238 HIGH
Merchandise Online Store - Privilege Escalation
CVSS 8.8
CVE-2022-41746 CRITICAL
Trend Micro Apex One - Privilege Escalation
CVSS 9.1
CVE-2022-36158 HIGH
Contec FXA3200 <1.13.00 - Command Injection
CVSS 8.0
CVE-2022-2551 HIGH
Duplicator <1.4.7 - Info Disclosure
CVSS 7.5
CVE-2022-2544 HIGH
Ninja Job Board <1.3.3 - Path Traversal
CVSS 7.5
CVE-2022-34574 MEDIUM
Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 - Info Disclo...
CVSS 5.7
CVE-2022-34573 MEDIUM
Wavlink WiFi-Repeater - Info Disclosure
CVSS 6.3
CVE-2022-34572 MEDIUM
Wavlink WiFi-Repeater - Info Disclosure
CVSS 5.7
CVE-2022-34571 HIGH
Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 - Code Injection
CVSS 8.0
CVE-2022-34570 HIGH
Wavlink Wl-wn579x3 Firmware - Information Disclosure
CVSS 7.5
CVE-2022-1551 MEDIUM
SP Project & Document Manager <4.58 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities 223