Описание
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request.
This vulnerability was patched on 7 April 2026, and no customer action is needed.
EPSS
Процентиль: 42%
0.0051
Низкий
Дефекты
CWE-862
Связанные уязвимости
github
3 месяца назад
A Missing Authorization vulnerability in a GraphQL private API operation of the Google App Engine section of the Cloud Console allows an unauthenticated remote attacker to leak sensitive App Engine request logs from other projects using a specially crafted request. This vulnerability was patched on 7 April 2026, and no customer action is needed.
EPSS
Процентиль: 42%
0.0051
Низкий
Дефекты
CWE-862