CWE-837 Improper Enforcement of a Single, Unique Action
Description
The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or improperly enforces this restriction.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-837 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-8r29-2mp2-pmrw | CVE-2026-105850 | HIGH |
Payload Ecommerce has an order confirmation validation issue |
2026-10-06 | |
| GHSA-rr73-568v-28f8 | CVE-2026-42609 | HIGH | - |
Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic |
2026-05-13 |
| GHSA-7whh-79j3-7c55 | CVE-2025-62784 | MODERATE |
InventoryGui allows item duplication in GUIs which use GuiStorageElement |
2025-10-28 | |
| GHSA-rgvh-4m82-fvjq | CVE-2025-62782 | MODERATE |
InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement |
2025-10-27 | |
| GHSA-598q-jw82-5w66 | CVE-2025-62783 | MODERATE |
InventoryGui affected by item duplication in GUIs which use GuiStorageElement |
2025-10-27 | |
| GHSA-gc7q-jgjv-vjr2 | CVE-2024-4629 | MODERATE |
Keycloak Services has a potential bypass of brute force protection |
2024-09-17 | |
| GHSA-8wm9-24qg-m5qj | - | MODERATE |
Duplicate Advisory: Keycloak has a brute force login protection bypass |
2024-09-17 |