Lucene search
Veracode Vulnerability DatabaseVERACODE:38553HistoryDec 21, 2022 - 6:47 a.m.
Authorization Bypass
2022-12-2106:47:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
vulnerability
authorization bypass
github.com/openfga/openfga
readusertuple
check_utils.go
lack of validation
attacker
0.002 Low
EPSS
Percentile
54.2%
github.com/openfga/openfga is vulnerable to authorization bypass. The vulnerability exists in the readUserTuple function in check_utils.go due to the lack of validation in authorization mechanism which allows an attacker to bypass the authorization mechanism under certain conditions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/openfga/openfga | le | v0.3.0 | |
| github.com/openfga/openfga | le | v0.3.0 |
Related
cve
cve
CVE-2022-23542
2022-12-20 21:15:10
osv
osv
OpenFGA Authorization Bypass
2022-12-20 19:33:27
CVE-2022-23542
2022-12-20 21:15:10
nvd
nvd
CVE-2022-23542
2022-12-20 21:15:10
cvelist
cvelist
CVE-2022-23542 OpenFGA Authorization Bypass
2022-12-20 20:15:16
prion
prion
Authorization
2022-12-20 21:15:00
github
github
OpenFGA Authorization Bypass
2022-12-20 19:33:27