Veracode Vulnerability DatabaseVERACODE:46410Improper Handling Of Exceptional Conditions
2.2 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
github.com/authzed/spicedb is vulnerable Improper Handling Of Exceptional Conditions. The vulnerability causes incorrect results when using a specific schema involving the same subject type multiple times in a relation. This issue leads to incorrect access control decisions when relying on LookupSubjects for negative authorization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/authzed/spicedb | le | v1.30.0 | |
| github.com/authzed/spicedb | le | v1.30.0 |
Related
2.2 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%