CVE-2022-32170
Published Sep 28, 2022
Last updated a year ago
Overview
- Description
- The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userId}”.
- Source
- vulnerabilitylab@mend.io
- NVD status
- Modified
Weaknesses
- vulnerabilitylab@mend.io
- CWE-285
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bytebase:bytebase:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58D2B448-3301-48A8-8796-C8FDA52268A6",
"versionEndIncluding": "1.0.4",
"versionStartIncluding": "0.1.0"
}
],
"operator": "OR"
}
]
}
]