Broken Access Control
2025
- CVE-2025-8790: Broken Object Level Authorization (BOLA) in pessoa API Endpoint Allows Unauthorized Access to Other Users Data Aug 10
- CVE-2025-8789: Broken Function Level Authorization (BFLA) allows unauthorized users to alter student grades Aug 10
- CVE-2024-57032: Broken Authentication - Old Password Jan 17