cve.bz

CVE-2022-32169

4.3 mediumEPSS 0.7%

Medium (4.3) in bytebase bytebase. EPSS 0.7% chance of exploitation in the next 30 days.

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWEs
CWE-732, CWE-285
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-5rc4-v5mj-g8c4Gogithub.com/bytebase/bytebase>=0.1.0 <=1.0.4no fix published

References

Check your stackJSON