GO-2023-1723

vendorUSosv

SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

view advisory published 2024-08-20Licence: per source

SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-29193UShigh7.5—
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. The `spicedb serve` command contains a fla…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan