Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 9.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gitlab-runner | Aug 22, 2024 | Jun 6, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-docsUpgrade go-srpm-macrosUpgrade golang-raceUpgrade go-filesystemUpgrade golang-testsUpgrade go-rpm-templatesUpgrade golang-binUpgrade go-rpm-macrosUpgrade golang-github-gorilla-mux-develUpgrade golang-googlecode-net-develUpgrade runcUpgrade golang-github-kr-pty-develUpgrade golang-srcUpgrade golist-debuginfoUpgrade golangUpgrade golang-github-gorilla-context-develUpgrade golistUpgrade golang-github-syndtr-gocapability-develUpgrade golang-miscUpgrade golang-github-godbus-dbus-develUpgrade golang-googlecode-sqlite-develUpgrade runc-debuginfoUpgrade golang-shared | Oct 11, 2022 | Jun 8, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Debian | — | Upgrade golang-github-emicklei-go-restful | Jul 30, 2024 | Jun 8, 2022 |
| Dell Powerstore Dsa2025117 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 6, 2025 |
| Dell Powerstore Dsa2025147 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 27, 2025 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Suse | — | Upgrade containerized-data-importer-clonerUpgrade containerized-data-importer-apiUpgrade obs-service-cdi_containers_metaUpgrade containerd-develUpgrade containerized-data-importer-manifestsUpgrade helm-bash-completionUpgrade kubevirt-virt-apiUpgrade kubevirt-testsUpgrade helmUpgrade kubevirt-manifestsUpgrade containerized-data-importer-controllerUpgrade containerized-data-importer-uploadproxyUpgrade containerd-ctrUpgrade containerdUpgrade kubevirt-virtctlUpgrade kubevirt-virt-operatorUpgrade trivyUpgrade kubevirt-container-diskUpgrade containerized-data-importer-importerUpgrade kubevirt-virt-handlerUpgrade catatonitUpgrade containerized-data-importer-operatorUpgrade runcUpgrade helm-fish-completionUpgrade obs-service-kubevirt_containers_metaUpgrade kubevirt-virt-launcherUpgrade helm-zsh-completionUpgrade containerized-data-importer-uploadserverUpgrade kubevirt-virt-controller | Oct 26, 2022 | Jun 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub