Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: YugabyteDB Component: Yugabytedb Managed Clear all filters
TI-2023-00707 CVE-2023-0745 · GHSA-48x7-56r4-ghvr

Arbitrary File Write in High Availability Backup Upload

Priority MEDIUM 43

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary files through the backup upload endpoint by using path traversal characters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00514 Published 2023-02-09 No fix listed CWE-23
TI-2023-00544 CVE-2023-0574 · GHSA-pvq4-73cw-rg9h

Server-side request forgery in YugabyteDB Anywhere

Priority MEDIUM 43

Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2023-02-09 No fix listed CWE-307