CVE-2023-22738
vantage6 vulnerable to Improper Preservation of Permissions
概要
vantage6 vulnerable to Improper Preservation of Permissions
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Impact
Assigning existing users to a different organization is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain their permissions and therefore might be able to access stuff they should not be allowed to access.
Patches
Update to 3.8.0
Workarounds
None
References
None
For more information
If you have any questions or comments about this advisory:
- Email us at vantage6@iknl.nl
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
PyPI
vantage6
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0"}]}]
参照URL
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com