Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52j8-p7r3-733m

Опубликовано: 12 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

EPSS

Процентиль: 31%
0.00118
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 4 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CVSS3: 7.5
redhat
около 4 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CVSS3: 7.5
nvd
около 4 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CVSS3: 7.5
msrc
около 4 лет назад

Описание отсутствует

CVSS3: 7.5
debian
около 4 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret ...

EPSS

Процентиль: 31%
0.00118
Низкий

7.5 High

CVSS3

Дефекты

CWE-863