Lucene search

K
cvelistMitreCVELIST:CVE-2022-44009
HistoryDec 05, 2022 - 12:00 a.m.

CVE-2022-44009

2022-12-0500:00:00
mitre
www.cve.org
2
cve-2022-44009
key-value rbac
jinja filters
access control
stackstorm
sensitive information

EPSS

0.002

Percentile

55.3%

Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn’t check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.

EPSS

0.002

Percentile

55.3%

Related for CVELIST:CVE-2022-44009