Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 9.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gitlab-runner | Aug 22, 2024 | Jun 6, 2022 |
| Amazon Linux Ami 2 | — | Upgrade go-filesystemUpgrade golang-googlecode-net-develUpgrade golang-binUpgrade go-rpm-templatesUpgrade go-srpm-macrosUpgrade golang-docsUpgrade golang-testsUpgrade runcUpgrade golang-github-gorilla-mux-develUpgrade golang-raceUpgrade go-rpm-macrosUpgrade golang-sharedUpgrade golang-github-gorilla-context-develUpgrade golangUpgrade golang-miscUpgrade golang-github-kr-pty-develUpgrade golang-srcUpgrade golang-github-godbus-dbus-develUpgrade golistUpgrade golang-github-syndtr-gocapability-develUpgrade golang-googlecode-sqlite-develUpgrade golist-debuginfoUpgrade runc-debuginfo | Oct 11, 2022 | Jun 8, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Debian | — | Upgrade golang-github-emicklei-go-restful | Jul 30, 2024 | Jun 8, 2022 |
| Dell Powerstore Dsa2025117 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 6, 2025 |
| Dell Powerstore Dsa2025147 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 27, 2025 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Suse | — | Upgrade runcUpgrade kubevirt-virt-controllerUpgrade containerized-data-importer-importerUpgrade helm-fish-completionUpgrade containerized-data-importer-uploadserverUpgrade kubevirt-virt-handlerUpgrade containerized-data-importer-operatorUpgrade helm-zsh-completionUpgrade obs-service-kubevirt_containers_metaUpgrade kubevirt-virt-launcherUpgrade catatonitUpgrade containerized-data-importer-controllerUpgrade containerd-ctrUpgrade kubevirt-virt-apiUpgrade helm-bash-completionUpgrade kubevirt-testsUpgrade containerized-data-importer-clonerUpgrade trivyUpgrade kubevirt-container-diskUpgrade containerd-develUpgrade obs-service-cdi_containers_metaUpgrade helmUpgrade containerized-data-importer-manifestsUpgrade kubevirt-manifestsUpgrade kubevirt-virtctlUpgrade containerdUpgrade kubevirt-virt-operatorUpgrade containerized-data-importer-uploadproxyUpgrade containerized-data-importer-api | Oct 26, 2022 | Jun 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub