Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52j8-p7r3-733m

Опубликовано: 12 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

EPSS

Процентиль: 86%
0.02676
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 5 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CVSS3: 7.5
redhat
почти 5 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CVSS3: 7.5
nvd
почти 5 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

CVSS3: 7.5
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 7.5
debian
почти 5 лет назад

cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret ...

EPSS

Процентиль: 86%
0.02676
Низкий

7.5 High

CVSS3

Дефекты

CWE-863