Lucene search
PRIOn knowledge basePRION:CVE-2022-39352HistoryNov 08, 2022 - 8:15 a.m.
Authorization
2022-11-0808:15:00
PRIOn knowledge base
www.prio-n.com
3
openfga
authorization
permission
engine
vulnerability
versions
v0.2.5
bypass
tuple
wildcard
tupleset
relation
patch
backward compatible
OpenFGA is a high-performance authorization/permission engine inspired by Google Zanzibar. Versions prior to 0.2.5 are vulnerable to authorization bypass under certain conditions. You are affected by this vulnerability if you added a tuple with a wildcard (*) assigned to a tupleset relation (the right hand side of a Γ’β¬ΛfromΓ’β¬β’ statement). This issue has been patched in version v0.2.5. This update is not backward compatible with any authorization model that uses wildcard on a tupleset relation.
Related
osv
osv
OpenFGA Authorization Bypass
2022-11-08 22:31:25
CVE-2022-39352
2022-11-08 08:15:09
veracode
veracode
Authorization Bypass
2022-11-11 02:30:15
cve
cve
CVE-2022-39352
2022-11-08 08:15:09
github
github
OpenFGA Authorization Bypass
2022-11-08 22:31:25
cvelist
cvelist
CVE-2022-39352 OpenFGA Authorization Bypass
2022-11-08 00:00:00
nvd
nvd
CVE-2022-39352
2022-11-08 08:15:09