Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xr4-qrm5-m2w8

Опубликовано: 22 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9

Описание

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request.

This vulnerability was patched on 7 April 2026, and no customer action is needed.

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request.

This vulnerability was patched on 7 April 2026, and no customer action is needed.

EPSS

Процентиль: 42%
0.0051
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-862

Связанные уязвимости

nvd
3 месяца назад

A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.

EPSS

Процентиль: 42%
0.0051
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-862