Insufficient Information

2023-10-0220:14:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

information security

vulnerability

policy enforcement

devetool

remote attacker

html page

navigation restrictions

0.001 Low

EPSS

Percentile

31.9%

JSON

edge is vulnerable to insufficient Information.The vulnerability exists due to Insufficient policy enforcement in devetool . which allows to remote attacker to bypass navigation restrictions via a crafted HTML page.

CPENameOperatorVersion
go:edgeeq1.18-r1
go:edgeeq1.20.4-r0
go:edgeeq1.16.3-r0
go:edgeeq1.19.5-r0
go:edgeeq1.20.1-r0
go:edgeeq1.17.1-r0
go:edgeeq1.16.7-r0
go:edgeeq1.19.3-r0
go:edgeeq1.20.7-r0
go:edgeeq1.16-r0

Name	Operator	Version
go:edge	eq	1.18-r1
go:edge	eq	1.20.4-r0
go:edge	eq	1.16.3-r0
go:edge	eq	1.19.5-r0
go:edge	eq	1.20.1-r0
go:edge	eq	1.17.1-r0
go:edge	eq	1.16.7-r0
go:edge	eq	1.19.3-r0
go:edge	eq	1.20.7-r0
go:edge	eq	1.16-r0