Summary
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Event Store EventStoreDB ausnutzen, um Informationen offenzulegen.
Product
EventStoreDB ist eine Datenbank zur Unterstützung des Event-Sourcing-Konzepts.
Vulnerabilities 1
-
Medium 5.5
EventStoreDB Projections Subsystem has potential password leak
EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has been identified in the projections subsystem in versions 20 prior to 20.10.6, 21 prior to 21.10.11, 22 prior to 22.10.5, and 23 prior to 23.10.1. Only database instances…
Revision history
-
#1
Initiale Fassung
References
-
EventStoreDB Security Release vom 2024-02-21
https://www.eventstore.com/blog/eventstoredb-security-release-23.10-22.10-21.10-and-20.10-for-cve-2024-26133
-
EventStoreDB Security Release vom 2024-02-21
https://github.com/EventStore/EventStore/security/advisories/GHSA-6r53-v8hj-x684