Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/10 9:31 p.m.23 views

Temporal does not enforce authentication and authorization for the streaming AdminService/StreamWorkflowReplicationMessages endpoint

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

6.3CVSS5.8AI score0.00527EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder