Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 9.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-gitlab-runner | Aug 22, 2024 | Jun 6, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-go-filesystemamazon-linux-ami-2-upgrade-go-rpm-macrosamazon-linux-ami-2-upgrade-go-rpm-templatesamazon-linux-ami-2-upgrade-go-srpm-macrosamazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-github-godbus-dbus-develamazon-linux-ami-2-upgrade-golang-github-gorilla-context-develamazon-linux-ami-2-upgrade-golang-github-gorilla-mux-develamazon-linux-ami-2-upgrade-golang-github-kr-pty-develamazon-linux-ami-2-upgrade-golang-github-syndtr-gocapability-develamazon-linux-ami-2-upgrade-golang-googlecode-net-develamazon-linux-ami-2-upgrade-golang-googlecode-sqlite-develamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-raceamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-testsamazon-linux-ami-2-upgrade-golistamazon-linux-ami-2-upgrade-golist-debuginfoamazon-linux-ami-2-upgrade-runcamazon-linux-ami-2-upgrade-runc-debuginfo | Oct 11, 2022 | Jun 8, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-golang | Sep 30, 2022 | Jun 8, 2022 |
| Debian | debian-upgrade-golang-github-emicklei-go-restful | Jul 30, 2024 | Jun 8, 2022 | |
| Dell Powerstore Dsa2025117 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Mar 6, 2025 | |
| Dell Powerstore Dsa2025147 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Mar 27, 2025 | |
| Dell Powerstore Dsa2025182 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Apr 17, 2025 | |
| Suse | — | suse-upgrade-catatonitsuse-upgrade-containerdsuse-upgrade-containerd-ctrsuse-upgrade-containerd-develsuse-upgrade-containerized-data-importer-apisuse-upgrade-containerized-data-importer-clonersuse-upgrade-containerized-data-importer-controllersuse-upgrade-containerized-data-importer-importersuse-upgrade-containerized-data-importer-manifestssuse-upgrade-containerized-data-importer-operatorsuse-upgrade-containerized-data-importer-uploadproxysuse-upgrade-containerized-data-importer-uploadserversuse-upgrade-helmsuse-upgrade-helm-bash-completionsuse-upgrade-helm-fish-completionsuse-upgrade-helm-zsh-completionsuse-upgrade-kubevirt-container-disksuse-upgrade-kubevirt-manifestssuse-upgrade-kubevirt-testssuse-upgrade-kubevirt-virt-apisuse-upgrade-kubevirt-virt-controllersuse-upgrade-kubevirt-virt-handlersuse-upgrade-kubevirt-virt-launchersuse-upgrade-kubevirt-virt-operatorsuse-upgrade-kubevirt-virtctlsuse-upgrade-obs-service-cdi_containers_metasuse-upgrade-obs-service-kubevirt_containers_metasuse-upgrade-runcsuse-upgrade-trivy | Oct 26, 2022 | Jun 8, 2022 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub