CVE-2022-32169

The Bytebase application (versions 0.1.0 through 1.0.4 ) is vulnerable to an authorization bypass (CWE-732, CWE-285). The root cause is an access control error in the issue.ts file, where the application fails to restrict low-privilege users from accessing admin issues . Specifically, an unauthor...

CVE-2022-32169 bytebase - Improper Authorization

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”...