GO-2026-5323 Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives in github.com/fission/fission

Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives in github.com/fission/fission...

Improper Authorization

github.com/fission/fission is vulnerable to improper authorization. The vulnerability is due to the storagesvc component exposing archive CRUD endpoints without performing authentication or authorization checks, which allows an attacker with access to the storagesvc service to enumerate archive...