CVE-2022-32170

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-32170
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-32170.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-32170
Aliases
Published
2022-09-28T10:15:09Z
Modified
2025-05-21T14:15:24Z
Summary
[none]
Details

The “Bytebase” application does not restrict low privilege user to access admin “projects“ for which an unauthorized user can view the “projects“ created by “Admin” and the affected endpoint is “/api/project?user=${userId}”.

References

Affected packages

Git / github.com/bytebase/bytebase

Affected ranges

Type
GIT
Repo
https://github.com/bytebase/bytebase
Events