Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-83vf-mjcw-6wh8

Опубликовано: 27 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

EPSS

Процентиль: 12%
0.0004
Низкий

2.7 Low

CVSS3

Дефекты

CWE-425
CWE-862

Связанные уязвимости

CVSS3: 2.7
nvd
больше 2 лет назад

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

EPSS

Процентиль: 12%
0.0004
Низкий

2.7 Low

CVSS3

Дефекты

CWE-425
CWE-862