Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 9.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gitlab-runner | Aug 22, 2024 | Jun 6, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade golist-debuginfoUpgrade golangUpgrade golang-github-kr-pty-develUpgrade runc-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade golang-sharedUpgrade golang-googlecode-sqlite-develUpgrade golang-github-gorilla-context-develUpgrade golang-srcUpgrade golang-miscUpgrade golang-github-godbus-dbus-develUpgrade golang-github-gorilla-mux-develUpgrade golang-raceUpgrade golang-googlecode-net-develUpgrade runcUpgrade golang-testsUpgrade go-rpm-macrosUpgrade go-rpm-templatesUpgrade golang-binUpgrade golang-docsUpgrade go-srpm-macrosUpgrade go-filesystem | Oct 11, 2022 | Jun 8, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Debian | — | Upgrade golang-github-emicklei-go-restful | Jul 30, 2024 | Jun 8, 2022 |
| Dell Powerstore Dsa2025117 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 6, 2025 |
| Dell Powerstore Dsa2025147 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 27, 2025 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Suse | — | Upgrade runcUpgrade catatonitUpgrade helm-zsh-completionUpgrade obs-service-kubevirt_containers_metaUpgrade kubevirt-virt-launcherUpgrade kubevirt-virt-handlerUpgrade containerized-data-importer-uploadserverUpgrade kubevirt-virt-controllerUpgrade helm-fish-completionUpgrade containerized-data-importer-operatorUpgrade containerized-data-importer-importerUpgrade kubevirt-virt-operatorUpgrade containerized-data-importer-apiUpgrade obs-service-cdi_containers_metaUpgrade helm-bash-completionUpgrade helmUpgrade containerized-data-importer-manifestsUpgrade containerd-develUpgrade kubevirt-container-diskUpgrade kubevirt-manifestsUpgrade trivyUpgrade containerized-data-importer-clonerUpgrade containerized-data-importer-uploadproxyUpgrade kubevirt-virtctlUpgrade containerdUpgrade containerized-data-importer-controllerUpgrade kubevirt-testsUpgrade kubevirt-virt-apiUpgrade containerd-ctr | Oct 26, 2022 | Jun 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub