Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
•added 2023/06/26 11:06 p.m.•17 views

CVE-2023-22834 The contour service was not checking that users had permission to create an analysis for a given dataset

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create...

2.7CVSS6.8AI score0.0035EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/26 12:00 a.m.•3 views

CVE-2023-22834: Direct Request

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create...

4.3CVSS5.5AI score0.0035EPSS
SaveExploits0References3
Rows per page
Query Builder