Common Weakness Enumeration
CWE-566 Authorization Bypass Through User-Controlled SQL Primary Key
Description
The product uses a database table that includes records that should not be accessible to an actor, but it executes a SQL statement with a primary key that can be controlled by that actor.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-566 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-h8wv-vv58-468h | CVE-2025-56556 | MODERATE | - |
Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool |
2025-11-27 |
| GHSA-vw63-824v-qf2j | CVE-2024-22261 | LOW |
SQL Injection in Harbor scan log API |
2024-06-17 |