TYPE DE FAIBLESSE

CWE-273

3 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-273 (en anglais) →

CVE-2023-0657A flaw was found in Keycloak. This issue occurs due to improperly enforcing token types when validating signatures locally. This could allow an authenticated attacker to exchange a… 3.4 FAIBLE

CVE-2024-21848Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they… 3.1 FAIBLE

CVE-2023-21246In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation o… 3.3 FAIBLE