CWE-283 Unverified Ownership
Description
The product does not properly verify that a critical resource is owned by the proper entity.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-283 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-7rhf-42qf-vrvc | CVE-2025-24890 | MODERATE | - |
gix-sec safe.directory protections absent for elevated administrators |
2026-09-09 |
| GHSA-j9wf-vvm6-4r9w | CVE-2020-8554 | MODERATE |
Unverified Ownership in Kubernetes |
2026-06-09 | |
| GHSA-mqq6-cqcx-38vg | CVE-2026-44562 | MODERATE |
Open WebUI's Model Import Overwrites Any Model Without Ownership Check |
2026-05-15 | |
| GHSA-gfhq-7499-f3f2 | CVE-2026-29788 | HIGH | - |
TSPortal: Any user can forge self-deletion requests for any account |
2026-03-27 |
| GHSA-xfhr-q72q-jcrj | CVE-2026-4269 | MODERATE |
Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit |
2026-03-17 | |
| GHSA-jfv4-h8mc-jcp8 | CVE-2026-27486 | MODERATE |
OpenClaw: Process Safety - Unvalidated PID Kill via SIGKILL in Process Cleanup |
2026-02-23 | |
| GHSA-g7vw-f8p5-c728 | CVE-2026-26016 | CRITICAL | - |
Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization |
2026-02-19 |
| GHSA-438m-6mhw-hq5w | CVE-2025-9822 | MODERATE | - |
Mautic vulnerable to secret data extraction via elfinder |
2025-09-03 |
| GHSA-6frx-j292-c844 | CVE-2025-47940 | HIGH | - |
TYPO3 Allows Privilege Escalation to System Maintainer |
2025-05-20 |
| GHSA-7x6q-3v3m-cwjg | CVE-2023-30544 | LOW |
kiwi TCMS has possibility for user to update email address to unverified one |
2023-04-24 |