Skip to content
OpenAdvisories

Weakness (CWE)

CWE-424: Improper Protection of Alternate Path

Class Draft

The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Deploy different layers of protection to implement security in depth.

Source: MITRE CWE-424

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-48828 Public exploit EPSS 57%

    Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the …

    vBulletin vBulletin
  • Critical 10.0
    CVE-2025-48827 Public exploit EPSS 76%

    vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers'…

    vBulletin vBulletin