Go/github.com/bytebase/bytebase CVE-2022-32170: medium 4.3, EPSS 0.66%
Bytebase allows low-privilege users to view admin projects
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.1.0 | - | 1.0.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9mmc-27gw-w6mq
- https://nvd.nist.gov/vuln/detail/CVE-2022-32170
- https://github.com/bytebase/bytebase
- https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/project.ts#L166-L197
- https://www.mend.io/vulnerability-database/CVE-2022-32170
CVE-2022-32170 · published · modified · JSON