1027
Reference Description
https://www.cve.org/CVERecord?id=CVE-2005-1654
CVE-2005-1668 Access privileged functionality using direct request.
https://www.cve.org/CVERecord?id=CVE-2005-1668
CVE-2002-1798 Upload arbitrary files via direct request.
https://www.cve.org/CVERecord?id=CVE-2002-1798
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 721 OWASP Top Ten 2007 Category A10 - Failure to
Restrict URL Access
629 2333
MemberOf 722 OWASP Top Ten 2004 Category A1 - Unvalidated Input 711 2334
MemberOf 723 OWASP Top Ten 2004 Category A2 - Broken Access
Control
711 2335
MemberOf 953 SFP Secondary Cluster: Missing Endpoint
Authentication
888 2397
MemberOf 1031 OWASP Top Ten 2017 Category A5 - Broken Access
Control
1026 2437
MemberOf 1345 OWASP Top Ten 2021 Category A01:2021 - Broken
Access Control
1344 2487
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Notes
Relationship
Overlaps Modification of Assumed-Immutable Data (MAID), authorization errors, container
errors; often primary to other weaknesses such as XSS and SQL injection.
Theoretical
"Forced browsing" is a step-based manipulation involving the omission of one or more steps,
whose order is assumed to be immutable. The application does not verify that the first step was
performed successfully before the second step. The consequence is typically "authentication
bypass" or "path disclosure," although it can be primary to all kinds of weaknesses, especially in
languages such as PHP, which allow external modification of assumed-immutable variables.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Direct Request aka 'Forced Browsing'
OWASP Top Ten 2007 A10 CWE More Specific Failure to Restrict URL Access
OWASP Top Ten 2004 A1 CWE More Specific Unvalidated Input
OWASP Top Ten 2004 A2 CWE More Specific Broken Access Control
WASC 34 Predictable Resource Location
Software Fault Patterns SFP30 Missing endpoint authentication
Related Attack Patterns
CAPEC-ID Attack Pattern Name
87 Forceful Browsing
127 Directory Indexing
143 Detect Unpublicized Web Pages
144 Detect Unpublicized Web Services
668 Key Negotiation of Bluetooth Attack (KNOB)
CWE Version 4.14
CWE-426: Untrusted Search Path
CWE-426: Untrusted Search Path