Read the docs

bytebase

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

bytebase records in CISA KEV

No bytebase vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bytebase 2 records MEDIUM

Records

2 records in Bytebase · all components

TI-2022-13896 CVE-2022-32170 · GHSA-9mmc-27gw-w6mq

bytebase - Improper Authorization

Priority MEDIUM 53

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userI…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00663 Published 2022-09-28 No fix listed CWE-285
TI-2022-13895 CVE-2022-32169 · GHSA-5rc4-v5mj-g8c4

bytebase - Improper Authorization

Priority MEDIUM 53

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00663 Published 2022-09-28 No fix listed CWE-285
Open these records in search →