Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-23542
HistoryDec 20, 2022 - 9:15 p.m.

Authorization

2022-12-2021:15:00
PRIOn knowledge base
www.prio-n.com
1
openfga
authorization bypass
security assessment
patch
backward compatible
version 0.3.1

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA version 0.3.0 is vulnerable to authorization bypass under certain conditions. This issue has been patched in version 0.3.1 and is backward compatible.

CPENameOperatorVersion
openfgalt0.3.1

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

Related for PRION:CVE-2022-23542