by Kastro
Paper/Archive/CVE-2022-1996

CVE-2022-1996

emicklei emicklei/go-restful — Authorization Bypass Through User-Controlled Key in emicklei/go-restful

EPSS 3%CVSS 9.3
critical.is priorityof 100
46
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 87.8.878 × 2017.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

Affected

ProductAffectedFixed inSource
emicklei/go-restfulunspecified – < v3.8.0v3.8.0CNA

Scores by source

@huntrdev (CNA)9.3CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refhuntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1refgithub.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXBadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJRadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6refsecurity.netapp.com/advisory/ntap-20220923-0005advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6Vadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWSadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY