{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.1.0","last_affected":"1.0.4"}],"component":"github.com/bytebase/bytebase","cve_ids":["CVE-2022-32170"],"ecosystem":"Go","epss":0.00663,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9mmc-27gw-w6mq","id":"tcs_01M5KF5XV94NVE8H0VEH0338VS","modified_at":"2025-05-21T16:43:52Z","published_at":"2022-09-29T00:00:27Z","references":["https://osv.dev/vulnerability/GHSA-9mmc-27gw-w6mq","https://nvd.nist.gov/vuln/detail/CVE-2022-32170","https://github.com/bytebase/bytebase","https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/project.ts#L166-L197","https://www.mend.io/vulnerability-database/CVE-2022-32170"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-9mmc-27gw-w6mq","url":"https://osv.dev/vulnerability/GHSA-9mmc-27gw-w6mq"}],"summary":"Bytebase allows low-privilege users to view admin projects"}