Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2025/11/06 9:57 p.m.•29 views

CVE-2025-64179 lakeFS: Unauthenticated access to API usage metrics

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may...

5.3CVSS0.00288EPSS
SaveExploits0References2
Rows per page
Query Builder