Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvq4-73cw-rg9h

Опубликовано: 09 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0 through 2.13.

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0 through 2.13.

EPSS

Процентиль: 26%
0.0009
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 6.8
nvd
почти 3 года назад

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte Managed: from 2.0.0.0 through 2.13.0.0

CVSS3: 6.8
debian
почти 3 года назад

Server-Side Request Forgery (SSRF), Improperly Controlled Modification ...

EPSS

Процентиль: 26%
0.0009
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-307