CWE-639

High likelihood

Authorization Bypass Through User-Controlled Key

Parent: CWE-863 - Incorrect Authorization

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

1,573 vulnerabilities with CWE-639
CVE-2025-51628 HIGH
Agenzia Impresa Eccobook <v2.81.1 - IDOR
CVSS 7.5
CVE-2025-50340 MEDIUM
SOGo Webmail <5.6.0 - Privilege Escalation
CVSS 4.3
CVE-2025-5947 CRITICAL
Service Finder Bookings <6.0 - Privilege Escalation
CVSS 9.8
CVE-2025-50849 HIGH
CS Cart 4.18.3 - Privilege Escalation
CVSS 8.0
CVE-2025-53944 HIGH
AutoGPT <0.6.15 - Auth Bypass
CVSS 7.7
CVE-2025-53357 MEDIUM
GLPI <10.0.18 - Privilege Escalation
CVSS 5.4
CVE-2025-52448 HIGH
Tableau Server < 2023.3.19 - IDOR
CVSS 8.1
CVE-2025-52447 HIGH
Tableau Server < 2023.3.19 - IDOR
CVSS 8.1
CVE-2025-52446 HIGH
Tableau Server < 2023.3.19 - IDOR
CVSS 8.0
CVE-2025-51479 MEDIUM
Onyx Enterprise Edition 0.27.0 - Auth Bypass
CVSS 5.4
CVE-2025-51865 HIGH
Ai2 Playground <2025-06-03 - Info Disclosure
CVSS 8.8
CVE-2025-51867 MEDIUM
Deepfiction AI - IDOR
CVSS 6.5
CVE-2025-34140 HIGH
ETQ Reliance - Auth Bypass
CVE-2025-7900 MEDIUM
TYPO3 femanager <6.4.1, 7.0.0-7.5.2, 8.0.0-8.3.0 - Info Disclosure
CVSS 6.5
CVE-2025-7899 MEDIUM
Powermail <13.0.0 - Info Disclosure
CVE-2025-7947 MEDIUM
jshERP <3.5 - Privilege Escalation
CVSS 5.4
CVE-2025-7938 MEDIUM
Jerryshensjf JPACookieShop 1.0 - Auth Bypass
CVSS 4.3
CVE-2025-51869 HIGH
Liner <2025-06-03 - Info Disclosure
CVSS 7.5
CVE-2025-51868 HIGH
Dippy <v2 - Info Disclosure
CVSS 7.5
CVE-2025-4129 HIGH
PAVO Pay <13.05.2025 - Auth Bypass
CVSS 7.5
CVE-2025-4040 HIGH
Turbak Automatic Station Monitoring System <5.0.6.51 - Privilege Es...
CVSS 7.1
CVE-2025-2301 MEDIUM
Akbim Software Online Exam Registration <14.03.2025 - Auth Bypass
CVSS 4.4
CVE-2025-5681 MEDIUM
Turtek Software Eyotek <23.06.2025 - Auth Bypass
CVSS 6.5
CVE-2025-1469 HIGH
Turtek Software Eyotek <11.03.2025 - Auth Bypass
CVSS 7.5
CVE-2025-53640 MEDIUM
Indico <3.3.7 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities 1,573
Exploit Likelihood High