15 matches found
GO-2026-6356 Missing authorization on vttablet /debug/vrlog in vitess.io/vitess
The vttablet /debug/vrlog HTTP endpoint streams live VReplication event data, including SQL statements and table row changes, without verifying authorization via acl.CheckAccessHTTP. An unauthenticated actor with network access to the debug endpoint can stream live replicated SQL data...
5.3CVSS5.8AI score0.00393EPSS
SaveExploits0References2
20