2 matches found
CVE-2023-22834 The contour service was not checking that users had permission to create an analysis for a given dataset
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create...
2.7CVSS6.8AI score0.0035EPSS
SaveExploits0References1
CVE-2023-22834: Direct Request
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create...
4.3CVSS5.5AI score0.0035EPSS
SaveExploits0References3
20