1 matches found
GHSA-XG4H-6GFC-H4M8 etcd: Watch API authorization bypass via open-ended range requests
Impact What kind of vulnerability is it? Who is impacted? A user granted READ permission on a single, exact key can use the Watch gRPC API with clientv3.WithFromKey an open-ended, "from this key to the end of the keyspace" watch to receive watch events for every key lexicographically greater than...
7.1CVSS5.9AI score0.00365EPSS
SaveExploits0References8
20