GO-2023-1871

vendorUSosv

SpiceDB's LookupResources may return partial results in github.com/authzed/spicedb

view advisory published 2024-08-20Licence: per source

SpiceDB's LookupResources may return partial results in github.com/authzed/spicedb

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-35930USmedium5.3—
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Any user making a negative authorization d…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan