PT-2023-23590

🗓️ 24 Aug 2023 00:00:00Reported by Positive TechnologiesType

Netmaker mass assignment allows non-admin users to become admins; patch in 0.17.1 and fix in 0.18.6.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-32079	25 Aug 202302:13	–	circl
CNNVD	Gravitl Netmaker 安全漏洞	24 Aug 202300:00	–	cnnvd
CVE	CVE-2023-32079	24 Aug 202322:03	–	cve
Cvelist	CVE-2023-32079 Netmaker Privilige Escalation Vulnerability	24 Aug 202322:03	–	cvelist
EUVD	EUVD-2023-2239	3 Oct 202520:07	–	euvd
Github Security Blog	Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User	25 Aug 202318:42	–	github
NVD	CVE-2023-32079	24 Aug 202323:15	–	nvd
OSV	CVE-2023-32079 Netmaker Privilige Escalation Vulnerability	24 Aug 202322:03	–	osv
OSV	GHSA-826J-8WP2-4X6Q Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User	25 Aug 202318:42	–	osv
OSV	GO-2023-2025 Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker	21 Aug 202414:17	–	osv

Source	Link
t	www.t.me/cibsecurity/69166
t	www.t.me/cveNotify/163875
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32079.json
github	www.github.com/gravitl/netmaker
osv	www.osv.dev/vulnerability/CVE-2023-32079
osv	www.osv.dev/vulnerability/GO-2023-2025
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-32079
github	www.github.com/gravitl/netmaker/security/advisories/GHSA-826j-8wp2-4x6q
osv	www.osv.dev/vulnerability/GHSA-826j-8wp2-4x6q