Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-69j6-4w2p-2887

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token.

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token.

EPSS

Процентиль: 32%
0.00123
Низкий

7.5 High

CVSS3

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 7.5
nvd
11 месяцев назад

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token.

EPSS

Процентиль: 32%
0.00123
Низкий

7.5 High

CVSS3

Дефекты

CWE-284
CWE-862