Skip to content
OpenAdvisories

Weakness (CWE)

CWE-842: Placement of User into Incorrect Group

Base Incomplete

The product or the administrator places a user into an incorrect group.

Source: MITRE CWE-842

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-102585

    Moodle: group validation missing when enrolling user to course

    A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit this flaw …

    moodle Web / CMS Ubuntu
  • Medium 6.3
    CVE-2022-45097

    Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network att…

    Dell PowerScale OneFS
  • Medium 4.9
    CVE-2022-31007 Public exploit EPSS 27%

    Privilege escalation from administrator in eLabFTW

    eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assign itself system administrator privileges within the application, or create a ne…

    elabftw elabftw