Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/11/06 9:57 p.m.20 views

CVE-2025-64179 lakeFS: Unauthenticated access to API usage metrics

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below, missing authentication in the /api/v1/usage-report/summary endpoint allows anyone to retrieve aggregate API usage counts. While no sensitive data is disclosed, the endpoint may...

5.3CVSS0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder