Lucene search
+L
KeystonejsKeystone-5

1 matches found

CVE
CVE
added 2021/05/24 4:55 p.m.57 views

CVE-2021-32624

CVE-2021-32624 concerns Keystone 5, where a flaw in the query infrastructure can bypass read access control to expose private field values or metadata. The attacker can reveal information from private fields or lists, via an access-control related oracle attack; complexity is length-dependent and...

7.5CVSS5.4AI score0.00864EPSS
Save