Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j737-qjj5-9rc5

Опубликовано: 16 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.

EPSS

Процентиль: 37%
0.00153
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 5.3
nvd
больше 3 лет назад

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.

EPSS

Процентиль: 37%
0.00153
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-639