What is GHSA-5rc4-v5mj-g8c4?

GHSA-5rc4-v5mj-g8c4 is a security advisory published by GitHub Security Advisories with Medium severity. Bytebase does not restrict low privilege user to access admin issues

Which CVE IDs does GHSA-5rc4-v5mj-g8c4 cover?

GHSA-5rc4-v5mj-g8c4 covers the following CVE IDs: CVE-2022-32169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5rc4-v5mj-g8c4?

GHSA-5rc4-v5mj-g8c4 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-5rc4-v5mj-g8c4?

GHSA-5rc4-v5mj-g8c4 affects 1 product, including: go/github.com/bytebase/bytebase:\u003e= 0.1.0, \u003c= 1.0.4.

GHSA-5rc4-v5mj-g8c4MediumCVSS 4.3

Bytebase does not restrict low privilege user to access admin issues

Vendor

GitHub Security Advisories

Published

September 29, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-32169 →

📋 Description

The Bytebase application does not restrict low privilege user to access admin issues for which an unauthorized user can view the OPEN and CLOSED issues by Admin and the affected endpoint is /issue.

🎯 Affected products1

go/github.com/bytebase/bytebase:>= 0.1.0, <= 1.0.4

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-32169
https://github.com/bytebase/bytebase/blob/1.0.4/frontend/src/store/modules/issue.ts#L108-#L187
https://www.mend.io/vulnerability-database/CVE-2022-32169
https://github.com/advisories/GHSA-5rc4-v5mj-g8c4