CVE-2022-23542 in OpenFGAinformazioni

Riassunto

di MITRE • 21/12/2022

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA version 0.3.0 is vulnerable to authorization bypass under certain conditions. This issue has been patched in version 0.3.1 and is backward compatible.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

GitHub, Inc.

Prenotare

19/01/2022

Divulgazione

21/12/2022

Moderazione

accettato

CPE

pronto

EPSS

0.00910

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-23542
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-23542
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-23542/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to know what is going to be exploited?

We predict KEV entries!