Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/06/01 7:45 p.m.43 views

CVE-2022-31022 Missing Role Based Access Control for the REST handlers in bleve/http package

Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pave way for exploitation of a node’s filesystem where the bleve index resides, if the user has used bleve’s own HTTP bleve/http handlers fo...

6.2CVSS6.6AI score0.00336EPSS
SaveExploits0References3
Rows per page
Query Builder