Skip to content
OpenAdvisories

Package · Go

github.com/bytebase/bytebase

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2022-51026

    Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login

    Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST e…

    bytebase bytebase github.com/bytebase/bytebase Go
  • Medium 4.3
    CVE-2022-32169

    bytebase - Improper Authorization

    The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

    bytebase bytebase github.com/bytebase/bytebase Go
  • Medium 4.3
    CVE-2022-32170

    bytebase - Improper Authorization

    The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userId}”.

    bytebase bytebase github.com/bytebase/bytebase Go