Lucene search
Veracode Vulnerability DatabaseVERACODE:30998HistoryJun 18, 2021 - 6:07 a.m.
Information Disclosure
2021-06-1806:07:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.002 Low
EPSS
Percentile
62.1%
@apollosproject/data-connector-rock is vulnerable to information disclosure. Registration of a new user allows a user who knows basic profile information (name, birthday, gender, etc) of anyone to access anyone’s account using all app functionality within the app.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @apollosproject/data-connector-rock | le | 2.19.1-canary.10 | |
| @apollosproject/data-connector-rock | le | 2.19.1-canary.10 |
Related
gitlab
gitlab
Improper Authentication
2021-06-16 00:00:00
cnvd
cnvd
Apollos Apps licensing issue vulnerability
2021-06-18 00:00:00
prion
prion
Information disclosure
2021-06-16 22:15:00
cvelist
cvelist
CVE-2021-32691 Auto-merging Person Records Compromised
2021-06-16 21:45:13
cve
cve
CVE-2021-32691
2021-06-16 22:15:07
osv
osv
Auto-merging Person Records Compromised
2021-06-21 17:07:47
CVE-2021-32691
2021-06-16 22:15:07
github
github
Auto-merging Person Records Compromised
2021-06-21 17:07:47
nvd
nvd
CVE-2021-32691
2021-06-16 22:15:07