GHSA-wrxf-x8rm-6ggg

Source

https://github.com/advisories/GHSA-wrxf-x8rm-6ggg

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/04/GHSA-wrxf-x8rm-6ggg/GHSA-wrxf-x8rm-6ggg.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-wrxf-x8rm-6ggg

Aliases

Published

2023-04-04T15:30:27Z

Modified

2025-06-23T14:58:45.785629Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Fluent Fluentd and Fluent-ui use default password

Details

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password.

Database specific

{
    "nvd_published_at": "2023-04-04T15:15:00Z",
    "severity": "HIGH",
    "github_reviewed_at": "2023-08-11T18:59:49Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-276"
    ]
}

References

Affected packages

RubyGems / fluentd-ui

Package

Name: fluentd-ui
Purl: pkg:gem/fluentd-ui

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.2.2

Affected versions

0.*

0.1.0

0.1.1

0.1.2

0.1.3

0.1.4

0.2.0

0.3.0

0.3.1

0.3.2

0.3.3

0.3.5

0.3.6

0.3.7

0.3.8

0.3.9

0.3.10

0.3.11

0.3.12

0.3.13

0.3.14

0.3.15

0.3.16

0.3.17

0.3.18

0.3.19

0.3.20

0.3.21

0.4.0

0.4.1

0.4.2

0.4.3

0.4.4

0.4.5

1.*

1.0.0.alpha.1

1.0.0.alpha.2

1.0.0.alpha.3

1.0.0.beta.1

1.0.0

1.0.1

1.1.0

1.2.0

1.2.1