Skip to content
OpenAdvisories

Package · Go

github.com/bytebase/bytebase

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-51026

    Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login

    Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST e…

    bytebase bytebase github.com/bytebase/bytebase Go