Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6c66-33pw-q83j

Опубликовано: 11 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.4

Описание

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import.

This vulnerability was patched on 15 March 2026, and no customer action is needed.

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import.

This vulnerability was patched on 15 March 2026, and no customer action is needed.

EPSS

Процентиль: 11%
0.00207
Низкий

9.4 Critical

CVSS4

Дефекты

CWE-862

Связанные уязвимости

nvd
около 2 месяцев назад

A Missing Authorization vulnerability in the playbook import functionality in Dialogflow CX on Google Cloud Platform allows an authenticated user with specific roles to escalate privileges and potentially take over a GCP project using a maliciously crafted playbook import. This vulnerability was patched on 15 March 2026, and no customer action is needed.

EPSS

Процентиль: 11%
0.00207
Низкий

9.4 Critical

CVSS4

Дефекты

CWE-862