CVE-2021-45232

Apache APISIX Dashboard – Schwachstelle durch nicht autorisierten Zugriff CVE-2021-45232 FOFA-Abfrage title="Apache APISIX Dashboard" Betroffene Versionen Apache APISIX Dashboard 2.10.1 POC: root@kitploit: IP:PORT/apisix/admin/migrate/export Behebungsempfehlungen Aktualisieren Sie auf die neueste...

GHSA-P4JX-Q62P-X5JR MLflow allows low privilege users to delete any artifact

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing...