CVE-2022-32169

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-32169

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32169.json

Aliases

• GHSA-5rc4-v5mj-g8c4

Published

2022-09-28T10:15:09Z

Modified

2023-11-08T04:09:34.717933Z

Details

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

References

• https://www.mend.io/vulnerability-database/CVE-2022-32169
• https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/issue.ts#L108-L187