Lucene search
Veracode Vulnerability DatabaseVERACODE:38539HistoryDec 20, 2022 - 6:06 a.m.
Authorization Bypass
2022-12-2006:06:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
authorization
bypass
vulnerability
concourse
software
team scope
EPSS
0.001
Percentile
25.1%
github.com/concourse/concourse is vulnerable to authorization bypasses. A malicious user is able to send a request with a body including :team_name=team2 to bypass team scope check and gain access to certain resources belong to any other team.
Related
prion
prion
Authorization
2022-12-19 16:15:00
osv
osv
Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution
2022-10-19 20:26:05
CVE-2022-31683
2022-12-19 16:15:11
BIT-concourse-2022-31683
2024-03-06 10:50:52
nvd
nvd
CVE-2022-31683
2022-12-19 16:15:11
cvelist
cvelist
CVE-2022-31683
2022-12-19 00:00:00
github
github
cve
cve
CVE-2022-31683
2022-12-19 16:15:11