Home/CWE/Direct Request ('Forced Browsing')
Weakness

Direct Request ('Forced Browsing')

CWE-425 · Base · Incomplete

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-288 · Authentication Bypass Using an Alternate Path or Channel
ChildOfCWE-424 · Improper Protection of Alternate Path
ChildOfCWE-862 · Missing Authorization
Related
CanPrecedeCWE-471 · Modification of Assumed-Immutable Data (MAID)
CanPrecedeCWE-98 · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
◆

Attack Patterns (CAPEC)

5
How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-127Directory Indexing
CAPEC-143Detect Unpublicized Web Pages
CAPEC-144Detect Unpublicized Web Services
CAPEC-668Key Negotiation of Bluetooth Attack (KNOB)
CAPEC-87Forceful Browsing
⚠

CVEs With This Weakness

255
A sample of the 255 CVEs tagged with this weakness.
CVECVE-2026-7500
CVECVE-2026-4900
CVECVE-2026-4532
CVECVE-2026-34056
CVECVE-2026-34051
CVECVE-2026-32867
CVECVE-2026-29909
CVECVE-2026-25679
CVECVE-2026-22732
CVECVE-2026-1978
CVECVE-2026-0790
CVECVE-2026-0650
◉

Nuclei Scanner Templates

21
Open-source Nuclei templates that detect this weakness class - an actionable scan-for-it pivot. Licensed under the ProjectDiscovery / Nuclei terms.
criticalDynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation
criticalControlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation
criticalKentico - Installer Privilege Escalation
criticalFortra GoAnywhere MFT - Authentication Bypass
criticalZyxel ZyWall UAG/USG - Account Creation Access
criticalWP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option
criticalDigitalOcean Key Exposure via Axiom
highWordPress Duplicator <1.4.7 - Authentication Bypass
highWordPress Ninja Job Board < 1.3.3 - Direct Request
highWAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure
highTCExam <= 14.8.1 - Sensitive Information Exposure
highGurock TestRail Application files.md5 Exposure
highApache OFBiz - Remote Code Execution
mediumH5S CONSOLE - Unauthorized Access
mediumAmetys CMS Information Disclosure
mediumAutoptimize < 3.1.0 - Information Disclosure
mediumReprise License Manager 14.2 - Information Disclosure
mediumAtlassian Confluence Server - Local File Inclusion
mediumHongdian H8922 3.0.5 - Information Disclosure
mediumKirona Dynamic Resource Scheduler - Information Disclosure
mediumCisco RV110W RV130W RV215W Router - Information leakage
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin