Lucene search

K
osvGoogleOSV:GO-2024-2729
HistoryJun 04, 2024 - 3:19 p.m.

OpenFGA Authorization Bypass in github.com/openfga/openfga

2024-06-0415:19:21
Google
osv.dev
3
openfga
authorization bypass
github.com/openfga/openfga
software

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%

OpenFGA Authorization Bypass in github.com/openfga/openfga

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.4

Confidence

High

EPSS

0

Percentile

9.0%