GO-2024-2939

vendorUSosv

SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

view advisory published 2024-06-28Licence: per source

SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-38361USmedium5.3—
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan