CVE-2023-50976

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-50976
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50976.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-50976
Published
2023-12-17T00:00:00Z
Modified
2026-07-15T01:48:56.516623929Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50976.json"
}
References

Affected packages

Git / github.com/redpanda-data/redpanda

Affected ranges

Type
GIT
Repo
https://github.com/redpanda-data/redpanda
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0d3373a0f4153ca5160983f6f3a58bb68d864875
Introduced
27c0c49a6a722e5353e3eab6a53d88516a162790
Fixed
d79db9a9c053b9f2da53671a559873f5ca442ff5
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "23.1.21"
        },
        {
            "introduced": "23.2.0"
        },
        {
            "fixed": "23.2.18"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

release-0.*
release-0.99.24
release-20.*
release-20.11.1
release-20.11.2
release-20.11.3
release-20.11.4
release-20.11.5
release-20.11.6
release-20.12.1
release-20.12.2
release-20.12.3
release-20.12.4
release-20.12.5
v20.*
v20.12.5
v20.12.6
v20.12.7
v20.12.9
v21.*
v21.1.1
v21.1.2
v21.1.3
v21.1.4
v21.1.5
v21.10.1-beta1
v21.10.1-beta2
v21.11.1-beta1
v21.12.1-wasm-beta1
v21.2.1
v21.2.2
v21.3.1
v21.3.2
v21.3.3
v21.3.4
v21.3.4-beta1
v21.3.5
v21.3.5-beta1
v21.3.5-beta2
v21.3.5-beta3
v21.3.5-beta4
v21.3.5-beta5
v21.3.5-beta6
v21.3.6
v21.3.6-beta1
v21.3.7
v21.4.1
v21.4.10
v21.4.11
v21.4.12
v21.4.13
v21.4.14
v21.4.15
v21.4.16-beta1
v21.4.2
v21.4.3
v21.4.4
v21.4.5
v21.4.6
v21.4.7
v21.4.8
v21.4.9
v21.5.1
v21.5.2
v21.5.2-beta1
v21.5.2-beta2
v21.5.2-beta3
v21.5.3
v21.5.4
v21.5.5
v21.5.6
v21.5.6-beta1
v21.5.7
v21.6.1
v21.6.2
v21.6.3
v21.6.4
v21.6.5
v21.6.6
v21.7.1
v21.7.2
v21.7.3
v21.7.5
v21.7.6
v21.8.1-beta1
v21.8.1-beta2
v21.9.1-beta1
v22.*
v22.1.1-rc1
v22.2.1-rc1
v22.2.1-rc2
v22.2.1-rc3
v22.3.0-dev
v22.3.1-rc1
v22.3.1-rc2
v22.3.1-rc3
v22.3.1-rc4
v22.3.1-rc5
v23.*
v23.1.0-dev
v23.1.1
v23.1.1-rc1
v23.1.1-rc2
v23.1.1-rc3
v23.1.1-rc4
v23.1.1-rc5
v23.1.1-rc6
v23.1.1-rc7
v23.1.1-rc8
v23.1.10
v23.1.10-rc1
v23.1.10-rc2
v23.1.11
v23.1.11-rc1
v23.1.12
v23.1.12-rc1
v23.1.13
v23.1.13-rc1
v23.1.14
v23.1.14-rc1
v23.1.15
v23.1.15-rc1
v23.1.16
v23.1.16-rc1
v23.1.17
v23.1.17-rc1
v23.1.18
v23.1.18-rc1
v23.1.18-rc2
v23.1.19
v23.1.19-rc1
v23.1.19-rc2
v23.1.19-rc3
v23.1.2
v23.1.2-rc1
v23.1.2-rc2
v23.1.2-rc3
v23.1.20
v23.1.20-rc1
v23.1.21-rc1
v23.1.3
v23.1.3-rc1
v23.1.4
v23.1.4-rc1
v23.1.4-rc2
v23.1.4-rc3
v23.1.5
v23.1.5-rc1
v23.1.6
v23.1.6-rc1
v23.1.7
v23.1.7-rc1
v23.1.7-rc2
v23.1.7-rc3
v23.1.8
v23.1.8-rc1
v23.1.8-rc2
v23.1.9
v23.1.9-rc1
v23.1.9-rc2
v23.2.0-dev
v23.2.1
v23.2.1-rc1
v23.2.1-rc10
v23.2.1-rc2
v23.2.1-rc3
v23.2.1-rc4
v23.2.1-rc5
v23.2.1-rc6
v23.2.1-rc7
v23.2.1-rc8
v23.2.1-rc9
v23.2.10
v23.2.10-rc1
v23.2.11
v23.2.11-rc1
v23.2.12
v23.2.12-rc1
v23.2.12-rc2
v23.2.13
v23.2.13-rc1
v23.2.14
v23.2.14-rc1
v23.2.15
v23.2.15-rc1
v23.2.15-rc2
v23.2.16
v23.2.16-rc1
v23.2.16-rc2
v23.2.17
v23.2.17-rc1
v23.2.18-rc1
v23.2.18-rc2
v23.2.2
v23.2.2-rc1
v23.2.3
v23.2.3-rc1
v23.2.3-rc2
v23.2.4
v23.2.4-rc1
v23.2.5
v23.2.5-rc1
v23.2.6
v23.2.6-rc1
v23.2.7
v23.2.7-rc1
v23.2.8
v23.2.8-rc1
v23.2.8-rc2
v23.2.8-rc3
v23.2.8-rc4
v23.2.9
v23.2.9-rc1
v23.2.9-rc2
v23.2.9-rc3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50976.json"