Lucene search
+L

2 matches found

OSV
OSV
•added 2023/07/03 5:44 p.m.•27 views

CVE-2023-36815 Sealos billing system permission control defect

Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account sealos. io/v1/Payment, resulting in the ability to recharge any amou...

7.3CVSS6.7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/03 12:00 a.m.•2 views

CVE-2023-36815: Missing Authorization

Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account sealos. io/v1/Payment, resulting in the ability to recharge any amou...

8.1CVSS7.4AI score0.00549EPSS
SaveExploits0References2
Rows per page
Query Builder