CVE-2022-39352

creationtimestamp| type| source ---|---|--- 2022-11-08 12:34:59+00:00| seen| https://t.me/cibsecurity/52619...

CVE-2022-39352

CVE-2022-39352 affects OpenFGA (authorization engine). Vulnerability exists in versions prior to 0.2.5 when a tuple with a wildcard (*) is assigned to a tupleset relation (the right-hand side of a from statement), enabling authorization bypass under certain conditions. The issue has been patched ...

CVE-2022-39352 OpenFGA Authorization Bypass

OpenFGA is a high-performance authorization/permission engine inspired by Google Zanzibar. Versions prior to 0.2.5 are vulnerable to authorization bypass under certain conditions. You are affected by this vulnerability if you added a tuple with a wildcard assigned to a tupleset relation the right...