SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb
SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-46989US | medium5.3 | — | ||
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect sub… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/authzed/spicedb/commit/20855de75812bcbc975efebe7f76abf47c0f3edbFIX
- https://github.com/authzed/spicedb/commit/d4ef8e1dbce1eafaf25847f4c0f09738820f5bf2FIX
- https://github.com/authzed/spicedb/security/advisories/GHSA-jhg6-6qrx-38mrADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2024-46989ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan