GO-2023-2166

vendorUSosv

SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

view advisory published 2024-08-21Licence: per source

SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-46255USmedium6.5—
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Prior to version 1.27.0-rc1, when the provided dat…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan