Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j73p-gc9r-3pf8

Опубликовано: 22 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view everyone's user flink information, including executeSQL and config.

Mitigation:

all users should upgrade to 2.1.4

On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view everyone's user flink information, including executeSQL and config.

Mitigation:

all users should upgrade to 2.1.4

EPSS

Процентиль: 42%
0.002
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269
CWE-639

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view everyone's user flink information, including executeSQL and config. Mitigation: all users should upgrade to 2.1.4

EPSS

Процентиль: 42%
0.002
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-269
CWE-639