{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.1.0","last_affected":"1.0.4"}],"component":"github.com/bytebase/bytebase","cve_ids":["CVE-2022-32169"],"ecosystem":"Go","epss":0.00663,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5rc4-v5mj-g8c4","id":"tcs_01M5KEYS4X4CKN07RXSYG45JEY","modified_at":"2023-11-08T04:09:34.717933Z","published_at":"2022-09-29T00:00:27Z","references":["https://osv.dev/vulnerability/GHSA-5rc4-v5mj-g8c4","https://nvd.nist.gov/vuln/detail/CVE-2022-32169","https://github.com/bytebase/bytebase","https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/issue.ts#L108-#L187","https://www.mend.io/vulnerability-database/CVE-2022-32169"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-5rc4-v5mj-g8c4","url":"https://osv.dev/vulnerability/GHSA-5rc4-v5mj-g8c4"}],"summary":"Bytebase does not restrict low privilege user to access admin issues"}