cve.bz

CWE-425: Direct Request (Forced Browsing), page 2

Filter

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

What the weakness is: CWE-425 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 5
  • CAPEC-87 Forceful Browsing Likelihood: High · Severity: High
  • CAPEC-127 Directory Indexing Likelihood: High · Severity: Medium
  • CAPEC-143 Detect Unpublicized Web Pages Severity: Low
  • CAPEC-144 Detect Unpublicized Web Services Severity: Low
  • CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB) Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-425, as MITRE names them. Credits.

Ask an AI about CWE-425

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-425: Direct Request and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/425.html and https://cve.bz/cve/cwe/425?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 2.9CVE-2025-11280EPSS 0.5%

    A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's comple…

  2. 5.8CVE-2025-59797EPSS 0.3%

    Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

  3. 1.3CVE-2025-10287EPSS 0.3%

    A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The affected element is an unknown function of the file /auth/orderQuery. Such manipulation of the argument orderNo leads to direct request…

  4. 5.1CVE-2025-31971EPSS 0.1%

    AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability.  The issue may allow attackers to launch a server-side request forgery (SSRF) attack enabling unauthorized network calls from the system, potentially exposing inter…

  5. 9.8CVE-2022-43110EPSS 0.7%

    Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via an unspecified web interface. An unauthenticated remote attacker can make changes to the system in…

  6. 9.3CVE-2025-55736EPSS 0.3%

    flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem is in the routes/adminPanelUsers file.

  7. 5.3CVE-2025-41404EPSS 0.2%

    Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.

  8. 4.2CVE-2025-53073EPSS 0.2%

    In Sentry 25.1.0 through 25.5.1, an authenticated attacker can access a project's issue endpoint and perform unauthorized actions (such as adding a comment) without being a member of the project's team. A seven-digit issue ID must be known…

  9. 6.4CVE-2025-52920EPSS 0.3%

    Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of o…

  10. 5.5CVE-2025-6352EPSS 0.7%

    A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible…

  11. 8.6CVE-2025-48207EPSS 0.4%

    The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference.

  12. 8.6CVE-2025-48205EPSS 0.4%

    The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.

  13. 5.3CVE-2025-48202EPSS 0.3%

    The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.

  14. 8.6CVE-2025-48201EPSS 0.4%

    The ns_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location.

  15. 3.3CVE-2025-47226ExploitEPSS 1.3%

    Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.

  16. 8.8CVE-2025-46690EPSS 0.4%

    Ververica Platform 2.14.0 allows low-privileged users to access SQL connectors via a direct namespaces/default/formats request.

  17. 4.3CVE-2025-27581EPSS 0.4%

    NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

  18. 5.3CVE-2025-2595EPSS 0.5%

    An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.

  19. 8.6CVE-2025-32367EPSS 0.4%

    The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.

  20. 9.8CVE-2025-26689EPSS 1.2%

    Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product…

  21. 9.3CVE-2025-1542EPSS 0.4%

    Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXAR…

  22. 6.9CVE-2025-2147EPSS 0.6%

    A vulnerability was found in Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to files or dir…

  23. 5.3CVE-2024-55075EPSS 0.5%

    Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not shown in the UI, such as calendar and recipes.

  24. 5.3CVE-2024-9945EPSS 0.3%

    An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders.

  25. 6.3CVE-2024-11049EPSS 0.4%

    A vulnerability classified as problematic has been found in ZKTeco ZKBio Time 9.0.1. Affected is an unknown function of the file /auth_files/photo/ of the component Image File Handler. The manipulation leads to direct request. It is possib…

  26. 7.5CVE-2024-45195KEVExploitEPSS >99.9%

    Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

  27. 6.9CVE-2024-7753EPSS 0.9%

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user_images/. The manipulation leads to direct request. The attack…

  28. 6.1CVE-2024-42001EPSS 0.7%

    An improper authentication vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior enables an unauthenticated remote attacker to bypass authentication via a …

  29. 9.1CVE-2024-33897EPSS 0.7%

    A compromised HMS Networks Cosy+ device could be used to request a Certificate Signing Request from Talk2m for another device, resulting in an availability issue. The issue was patched on the Talk2m production server on April 18, 2024.

  30. 6.9CVE-2024-7153EPSS 0.5%

    A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. T…

  31. 6.9CVE-2024-7080EPSS 1.0%

    A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /E-Insurance/. The manipulation leads to direct reques…

  32. 7.2CVE-2024-39868EPSS 0.4%

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated at…

  33. 7.2CVE-2024-39867EPSS 0.4%

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated at…

  34. 6.9CVE-2024-6414EPSS 0.6%

    A vulnerability classified as problematic has been found in Parsec Automation TrakSYS 11.x.x. Affected is an unknown function of the file TS/export/contentpage of the component Export Page. The manipulation of the argument ID leads to dire…

  35. 6.9CVE-2024-6188ExploitEPSS 2.0%

    A vulnerability was found in Parsec Automation TrackSYS 11.x.x and classified as problematic. This issue affects some unknown processing of the file /TS/export/pagedefinition. The manipulation of the argument ID leads to direct request. Th…

  36. 5.3CVE-2024-2730EPSS 0.5%

    Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which could expose sensitive data. At the time of publication of the CVE no patch is avail…

  37. 5.3CVE-2023-45598EPSS 0.5%

    A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle b…

  38. 5.3CVE-2023-45596EPSS 0.5%

    A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux im…

  39. 4.3CVE-2024-0861EPSS 0.4%

    An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the `Guest` role can change `Custom…

  40. 7.5CVE-2023-46186EPSS 0.6%

    IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929.

  41. 9.8CVE-2024-24592EPSS 1.0%

    Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily access, create, modify and delete files.

  42. 6.5CVE-2023-50935EPSS 0.4%

    IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote attacker to obtain unauthorized access to application functionality and/or resources. IBM X-Force ID: 275115.

  43. 4.3CVE-2024-0456EPSS 0.5%

    An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project

  44. 9.8CVE-2024-0204ExploitEPSS 95%

    Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

  45. 4.3CVE-2023-44320EPSS 0.6%

    A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions …

  46. 8.8CVE-2023-5786EPSS 1.0%

    A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability affects unknown code of the file /geoserver/gwc/rest.html. The manipulation leads to direct request. The attack can be…

  47. 6.5CVE-2023-5702ExploitEPSS 19%

    A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been dis…

  48. 2.7CVE-2023-45809EPSS 0.6%

    Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles bulk actions on user accounts. While au…

  49. 5.3CVE-2023-4018EPSS 0.5%

    An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to create model experiments in public proj…

  50. 4.3CVE-2023-4544EPSS 1.2%

    A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The atta…