CWE-688

CVEs classified under CWE-688, newest first.

1 CVERSS

CVE-2026-76878None

In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false

In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than its value; a true value enforces the …

▾ SunlitEPSS 0.48%via NVD