CVE-2022-32169

2022-09-2810:15:09

CWE-285

CWE-732

[email protected]

web.nvd.nist.gov

bytebase

cve-2022-32169

unauthorized access

admin privilege

security vulnerability

nvd

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

Affected configurations

NVD

Node

bytebasebytebaseRange0.1.0–1.0.4

CPENameOperatorVersion
bytebase:bytebasebytebasele1.0.4

CPE	Name	Operator	Version
bytebase:bytebase	bytebase	le	1.0.4

CNA Affected

[
  {
    "product": "bytebase",
    "vendor": "bytebase",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0.1.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "1.0.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]