Common Weakness Enumeration

    CWE Definition / CWE-425

    CWE-425: Direct Request ('Forced Browsing')

    The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

    Published:N/A
    Organization:
    Modified:N/A

    Related Weakness

    CWE-862: Missing Authorization

    CWE-862: Missing Authorization

    CWE-288: Authentication Bypass Using an Alternate Path or Channel

    CWE-424: Improper Protection of Alternate Path

    CWE-471: Modification of Assumed-Immutable Data (MAID)

    CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')