Skip to content
OpenAdvisories

Package · Go

github.com/brokercap/Bifrost

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-39267

    Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups

    Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user grou…

    brokercap Bifrost github.com/brokercap/Bifrost Go
  • High 8.5
    CVE-2022-39219

    Bifrost users using basic authntication can bypass write permission limit

    Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only h…

    brokercap Bifrost github.com/brokercap/Bifrost Go