Product · Google

Exposure Notifications Verification Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.3

CVE-2021-22538

Privilege escalation in RBAC system

A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker who (1) has UserWrite permissions and (2) is using a carefully crafted request or malicious proxy, to create ano…

Google Exposure Notifications Verification Server github.com/google/exposure-notifications-verification-server Go

Mar 31, 2021