Skip to content
OpenAdvisories

Product · Temporal Technologies

Temporal Server

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.0
    CVE-2023-3485

    Insecure Default Authorization in Temporal Server

    Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the norm…

    Temporal Technologies Temporal Server go.temporal.io/server Go