En resumen
- CVE-2022-32169 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a github.com/bytebase/bytebase, bytebase (bytebase).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.66%, mayor que el 51.7% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
The Bytebase application does not restrict low privilege user to access admin issues for which an unauthorized user can view the OPEN and CLOSED issues by Admin and the affected endpoint is /issue.
NVD description
The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.
Más vulnerabilidades de github.com/bytebase/bytebase
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free