CWE-841
Improper Enforcement of Behavioral Workflow
ClassIncomplete
Description
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (22)
page 2 of 2| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-0105 | 0.00 | — | 0.01 | Jan 11, 2023 | A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them. | |||
| CVE-2022-0524 | 0.00 | — | 0.02 | Feb 8, 2022 | Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. |
- CVE-2023-0105Jan 11, 2023risk 0.00cvss —epss 0.01
A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.
- CVE-2022-0524Feb 8, 2022risk 0.00cvss —epss 0.02
Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.