Lucene search

K
osvGoogleOSV:GO-2022-1079
HistoryAug 21, 2024 - 4:03 p.m.

OpenFGA subject to Information Disclosure via streamed-list-objects endpoint in github.com/openfga/openfga

2024-08-2116:03:26
Google
osv.dev
2
openfga
information disclosure
streamed-list-objects
github
software

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.5

Confidence

Low

OpenFGA subject to Information Disclosure via streamed-list-objects endpoint in github.com/openfga/openfga

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.5

Confidence

Low

Related for OSV:GO-2022-1079