Skip to content
OpenAdvisories

Weakness (CWE)

CWE-566: Authorization Bypass Through User-Controlled SQL Primary Key

Variant Incomplete

The product uses a database table that includes records that should not be accessible to an actor, but it executes a SQL statement with a primary key that can be controlled by that actor.

How to prevent it (3 mitigations)

  1. Implementation

    Modify the query to include a clause that
    performs an authorization check, or otherwise ensure
    that the check is performed before the query is
    executed.

  2. Implementation

    Assume all input is malicious. Use a standard input validation mechanism to validate all input for length, type, syntax, and business rules before accepting the data. Use an "accept known good" validation strategy.

  3. Implementation

    Use a parameterized query AND make sure that the accepted values conform to the business rules. Construct your SQL statement accordingly.

Source: MITRE CWE-566

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.8
    CVE-2025-56556

    Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool

    An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the context of the SQL query tool.

    intelliants/subrion Packagist
  • Low 2.7
    CVE-2025-30369

    Zulip allows the deletion of Custom profile fields by administrators of a different organization

    Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user…

    zulip zulip
  • Low 2.7
    CVE-2025-30368

    Zulip allows the deletion of organization by administrators of a different organization

    Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricted to organization administrators, but its handler failed to check that the field belongs to the same organization as the user. Therefore, a…

    zulip zulip
  • Low 2.7
    CVE-2024-22261

    SQL Injection in Harbor scan log API

    SQL-Injection in Harbor allows priviledge users to leak the task IDs

    Harbor Harbor github.com/goharbor/harbor Go