Lucene search
+L

15 matches found

OSV
OSV
added 2026/09/15 6:39 p.m.7 views

GO-2026-6356 Missing authorization on vttablet /debug/vrlog in vitess.io/vitess

The vttablet /debug/vrlog HTTP endpoint streams live VReplication event data, including SQL statements and table row changes, without verifying authorization via acl.CheckAccessHTTP. An unauthenticated actor with network access to the debug endpoint can stream live replicated SQL data...

5.3CVSS5.8AI score0.00393EPSS
SaveExploits0References2
Rows per page
Query Builder