Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2022/02/09 10:17 p.m.•37 views

Incorrect Calculation in github.com/open-policy-agent/opa

Impact Under certain conditions, pretty-printing an AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths, see the example below. All of these three conditions have to be me...

6.3CVSS0.3AI score0.01026EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
•added 2022/02/09 9:50 p.m.•53 views

CVE-2022-23628 Array literal misordering in github.com/open-policy-agent/opa

OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths...

6.3CVSS6.5AI score0.01026EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•7 views

CVE-2022-23628: Incorrect Calculation

OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree AST that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted are those that parse and compare web paths...

6.3CVSS6.2AI score0.01026EPSS
SaveExploits1References2
Rows per page
Query Builder