Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/29 6:40 p.m.50 views

GHSA-QMJF-WC2H-6X3Q Nautobot dynamic-group-members doesn't enforce permission restrictions on member objects

Impact What kind of vulnerability is it? Who is impacted? A user with permissions to view Dynamic Group records extras.viewdynamicgroup permission can use the Dynamic Group detail UI view /extras/dynamic-groups// and/or the members REST API view /api/extras/dynamic-groups//members/ to list the...

6.3CVSS6.2AI score0.00398EPSS
SaveExploits0References8
Rows per page
Query Builder