CVE-2022-32169

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-32169
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32169.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-32169
Aliases
Published
2022-09-28T09:30:23.675Z
Modified
2026-08-12T03:51:24.053686133Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
bytebase - Improper Authorization
Details

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

Database specific 
{
    "cwe_ids": [
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32169.json",
    "cna_assigner": "Mend"
}
References

Affected packages

Git / github.com/bytebase/bytebase

Affected ranges

Type
GIT
Repo
https://github.com/bytebase/bytebase
Events
Introduced
a95560a0eeedfc8b9b0f3178911f33c024aef67e
Last affected
0bf9494aa0527dee35390994c3c210d9a6c9ff46
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:bytebase:bytebase:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.1.0"
        },
        {
            "last_affected": "1.0.4"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.1.0
0.10.0
0.2.0
0.2.1
0.3.0
0.4.0
0.4.1
0.5.0
0.6.0
0.7.0
0.7.2
0.8.0
0.8.1
0.9.0
1.*
1.0.0
1.0.3
1.0.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32169.json"