Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 9.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gitlab-runner | Aug 22, 2024 | Jun 6, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-googlecode-sqlite-develUpgrade golang-github-syndtr-gocapability-develUpgrade golangUpgrade golang-github-kr-pty-develUpgrade golang-srcUpgrade golang-github-gorilla-context-develUpgrade golistUpgrade golist-debuginfoUpgrade golang-sharedUpgrade runc-debuginfoUpgrade golang-github-godbus-dbus-develUpgrade golang-miscUpgrade go-rpm-macrosUpgrade go-rpm-templatesUpgrade golang-testsUpgrade golang-github-gorilla-mux-develUpgrade runcUpgrade golang-raceUpgrade go-srpm-macrosUpgrade go-filesystemUpgrade golang-docsUpgrade golang-binUpgrade golang-googlecode-net-devel | Oct 11, 2022 | Jun 8, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Debian | — | Upgrade golang-github-emicklei-go-restful | Jul 30, 2024 | Jun 8, 2022 |
| Dell Powerstore Dsa2025117 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 6, 2025 |
| Dell Powerstore Dsa2025147 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 27, 2025 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Suse | — | Upgrade helm-zsh-completionUpgrade kubevirt-virt-controllerUpgrade catatonitUpgrade containerized-data-importer-operatorUpgrade kubevirt-virt-launcherUpgrade helm-fish-completionUpgrade containerized-data-importer-importerUpgrade runcUpgrade obs-service-kubevirt_containers_metaUpgrade kubevirt-virt-handlerUpgrade containerized-data-importer-uploadserverUpgrade helm-bash-completionUpgrade containerized-data-importer-manifestsUpgrade containerized-data-importer-uploadproxyUpgrade containerdUpgrade obs-service-cdi_containers_metaUpgrade containerd-develUpgrade kubevirt-testsUpgrade containerized-data-importer-controllerUpgrade helmUpgrade kubevirt-manifestsUpgrade kubevirt-virt-apiUpgrade containerd-ctrUpgrade kubevirt-virtctlUpgrade containerized-data-importer-apiUpgrade containerized-data-importer-clonerUpgrade trivyUpgrade kubevirt-container-diskUpgrade kubevirt-virt-operator | Oct 26, 2022 | Jun 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub