Lucene search

User with ci:ReadAction permissions and write permissions to one path in a repository may copy objects from any path in the repository

🗓️ 22 Feb 2024 21:04:36Reported by GoogleType

osv🔗 osv.dev👁 5 Views

User with ci:ReadAction permissions can copy unreadable objects if they have read and write permissions to a specific path in a repository.Impact:Permissions validation bug allows unauthorized object copying

Source	Link
github	www.github.com/treeverse/lakeFS/security/advisories/GHSA-fvv5-h29g-f6w5
github	www.github.com/treeverse/lakeFS/commit/56556ee5406fc5425b9302cd08a8d412635fdcd7
github	www.github.com/treeverse/lakeFS

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Feb 2024 21:36Current

6.9Medium risk

Vulners AI Score6.9