1 matches found
GHSA-2V93-VP82-CJV8 Velocidex Velociraptor has an Incorrect Authorization issue
Velociraptor versions prior to 0.76.4 contain a cross organization authorization bypass in the HTTP API. A user with only the reader role in the root organization the lowest authenticated role, holding only READRESULTS permission can issue a single authenticated HTTP GET that can read any files...
6.8CVSS5.7AI score0.00236EPSS
SaveExploits0References3
20