Описание
Bytebase does not restrict low privilege user to access admin issues
The Bytebase application does not restrict low privilege user to access admin issues for which an unauthorized user can view the OPEN and CLOSED issues by Admin and the affected endpoint is /issue.
Пакеты
Наименование
github.com/bytebase/bytebase
go
Затронутые версииВерсия исправления
>= 0.1.0, <= 1.0.4
Отсутствует
Связанные уязвимости
CVSS3: 4.3
nvd
больше 3 лет назад
The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.