Skip to content
OpenAdvisories

Weakness (CWE)

CWE-425: Direct Request

Base Incomplete

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

How to prevent it (2 mitigations)

  1. Architecture and Design, Operation

    Apply appropriate access control authorizations for each access to all restricted URLs, scripts or files.

  2. Architecture and Design

    Consider using MVC based frameworks such as Struts.

Source: MITRE CWE-425

All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 8.7
    CVE-2026-35029 Public exploit EPSS 39%

    LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to m…

    BerriAI litellm litellm PyPI
  • Medium 5.3
    CVE-2026-29909 Public exploit

    MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/…

  • Critical 9.1
    CVE-2026-22732 Public exploit

    Under Some Conditions Spring Security HTTP Headers Are not Written

    When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP H…

    VMware Spring Security org.springframework.security:spring-security-web Maven
  • Critical 9.8
    CVE-2022-43110 Public exploit

    Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to con…

  • Medium 5.0
    CVE-2025-47226 Public exploit

    Grokability Snipe-IT has incorrect authorization for accessing asset information

    Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.

    Snipeitapp Snipe-IT snipe/snipe-it Packagist
  • Medium 4.3
    CVE-2025-27581 Public exploit

    NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role …

    NIH BRICS
  • Critical 9.8
    CVE-2024-45195 Exploited Public exploit EPSS 100%

    Apache OFBiz: Confused controller-view authorization logic (forced browsing)

    Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

    Apache Software Foundation Apache OFBiz
    KEV Feb 4, 2025
  • Critical 9.8
    CVE-2024-0204 Public exploit EPSS 95%

    Authentication Bypass in GoAnywhere MFT

    Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

    Fortra GoAnywhere MFT
  • Medium 4.3
    CVE-2023-5702 Public exploit EPSS 19%

    Viessmann Vitogate 300 direct request

    A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been disclosed to the public…

    Viessmann Vitogate 300
  • High 7.5
    CVE-2022-42953 Public exploit

    Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct …

  • Unscored —
    CVE-2022-2551 Public exploit EPSS 18%

    Duplicator < 1.4.7 - Unauthenticated Backup Download

    The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site b…

    Web / CMS
  • Medium 5.3
    CVE-2021-26085 Exploited · Ransomware Public exploit EPSS 100%

    Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authoriz…

    Atlassian Confluence Data Center Confluence Server Web / CMS
    KEV Mar 28, 2022