Improper Enforcement of a Single, Unique Action
CWE-837
The product requires that an actor should only be able to perform an action once, or to have only one unique action, but the product does not enforce or incorrectly enforces this restriction.
We track 4 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.8.
Latest Improper Enforcement of a Single, Unique Action vulnerabilities
- 8.2 High severity
payload: Improper Enforcement of a Single, Unique Action
Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed mor
- 8.1 High severity
grav: Improper Privilege Management
Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a business logic vulnerability in the Grav Admin Panel allows a low-privileged user (with only user creation permissions) to overwrite existing accounts, including the primary administrator. By creating
- 7.5 High severity
Tor: Improper Enforcement of a Single, Unique Action
Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.
- 7.5 High severity
IceCMS: Improper Enforcement of a Single, Unique Action
A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. This affects an unknown part of the file /WebResource/resource of the component Love Handler. The manipulation leads to improper enforcement of a single, unique action. It is pos