Skip to content
OpenAdvisories

Package · Go

github.com/bytebase/bytebase

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-32169

    bytebase - Improper Authorization

    The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

    bytebase bytebase github.com/bytebase/bytebase Go
  • Medium 4.3
    CVE-2022-32170

    bytebase - Improper Authorization

    The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userId}”.

    bytebase bytebase github.com/bytebase/bytebase Go