CVE-2022-31683

🗓️ 19 Dec 2022 16:11:15Reported by [email protected]Type

Concourse contains authorization bypass issu

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Prion	Authorization	19 Dec 202216:15	–	prion
OSV	CVE-2022-31683	19 Dec 202216:15	–	osv
OSV	GHSA-5JP2-VWRJ-99RF Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution	19 Oct 202220:26	–	osv
OSV	BIT-CONCOURSE-2022-31683	6 Mar 202410:50	–	osv
Vulnrichment	CVE-2022-31683	19 Dec 202200:00	–	vulnrichment
Veracode	Authorization Bypass	20 Dec 202206:06	–	veracode
CVE	CVE-2022-31683	19 Dec 202216:15	–	cve
Cvelist	CVE-2022-31683	19 Dec 202200:00	–	cvelist
Github Security Blog	Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution	19 Oct 202220:26	–	github

Nvd

Node

pivotal_software concourseRange6.0.0–6.7.9

pivotal_software concourseRange7.0.0–7.8.3

Source	Link
github	www.github.com/concourse/concourse/security/advisories/GHSA-5jp2-vwrj-99rf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Dec 2022 16:15Current

CVSS35.4

EPSS0.00048

CWE-639