CWE-602 Client-Side Enforcement of Server-Side Security
Description
The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-602 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-6753-gr46-6wpr | CVE-2026-54553 | MODERATE |
Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS |
2026-08-26 | |
| GHSA-h5v5-8746-g7mm | - | MODERATE |
JupyterLab PluginManager lock-rule enforcement bypass |
2026-07-22 | |
| GHSA-37w4-hwhx-4rc4 | CVE-2026-42266 | HIGH |
JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request |
2026-06-08 | |
| GHSA-4vg5-rp28-gvjf | CVE-2026-44567 | HIGH |
Open WebUI has Improper Authorization Control |
2026-05-19 | |
| GHSA-525j-95gf-766f | CVE-2026-30933 | HIGH |
FileBrowser Quantum: Password-Protected Share Bypass via /public/api/share/info |
2026-04-27 | |
| GHSA-8vrh-3pm2-v4v6 | CVE-2026-27611 | HIGH |
FileBrowser Quantum: Password Protection Not Enforced on Shared File Links |
2026-04-27 | |
| GHSA-qmg5-v42x-qqhq | CVE-2025-66507 | HIGH |
1Panel – CAPTCHA Bypass via Client-Controlled Flag |
2025-12-09 | |
| GHSA-9v8m-qv22-f268 | CVE-2025-23041 | MODERATE |
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length |
2025-09-19 | |
| GHSA-v7vm-rhmg-8j2r | CVE-2024-52008 | LOW |
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API |
2024-11-26 | |
| GHSA-m42x-37p3-fv5w | CVE-2020-8162 | HIGH |
Circumvention of file size limits in ActiveStorage |
2023-07-05 | |
| GHSA-47qg-q58v-7vrp | - | LOW |
UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend |
2020-12-02 | |
| GHSA-959q-32g8-vvp7 | CVE-2017-12161 | MODERATE |
Moderate severity vulnerability that affects org.keycloak:keycloak-core |
2020-06-16 |