Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: bytebase Component: Bytebase Clear all filters
TI-2022-13895 CVE-2022-32169 · GHSA-5rc4-v5mj-g8c4

bytebase - Improper Authorization

Priority MEDIUM 53

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00663 Published 2022-09-28 No fix listed CWE-285
TI-2022-13896 CVE-2022-32170 · GHSA-9mmc-27gw-w6mq

bytebase - Improper Authorization

Priority MEDIUM 53

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userI…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00663 Published 2022-09-28 No fix listed CWE-285