Description
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control http/cves/2022/CVE-2022-38817.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/dapr/dashboard | >= 0.1.0, <= 0.10.0 | — | GHSA-2w6m-q946-399r |
| Go | github.com/dapr/dashboard | >= 0.1.0 | — | GO-2022-1033 |