Zaakregister API Search Endpoint Auth Bypass via Parameter Manipulation

Vulnerability Summary Vulnerability Overview Vulnerability Name: The and endpoints fail to filter search results based on authorizations associated with the token. Description: This vulnerability affects two endpoints: - - Impact: If the application is associated with authorizations that grant search permissions, an attacker can use initial filters (such as ) to retrieve all objects and confidentiality information, thereby bypassing authorization restrictions. Scope of Impact Affected Versions: >=1.0.0 Fixed Versions: 1.27.2, 1.28.2, 1.29.0 CVSS Score: 6.3 / 10 (Medium) Remediation Patch Versions: - 1.29.0 - 1.28.1 - 1.27.1 POC Code ```json { "request": "http://localhost:8080/api/v1/zaken/zoek", "method": "POST", "headers": { "Content-Type": "application/json" }, "body": { "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken": "objecttype", "sorteerdeken":

Goal Reached Thanks to every supporter — we hit 100%!

Zaakregister API Search Endpoint Auth Bypass via Parameter Manipulation

More from this source