Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 9.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gitlab-runner | Aug 22, 2024 | Jun 6, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-syndtr-gocapability-develUpgrade golang-googlecode-sqlite-develUpgrade golang-github-kr-pty-develUpgrade golang-github-gorilla-context-develUpgrade golang-srcUpgrade golangUpgrade runc-debuginfoUpgrade golang-sharedUpgrade golang-miscUpgrade golang-github-godbus-dbus-develUpgrade golist-debuginfoUpgrade golistUpgrade go-rpm-macrosUpgrade runcUpgrade go-rpm-templatesUpgrade golang-github-gorilla-mux-develUpgrade golang-raceUpgrade go-srpm-macrosUpgrade go-filesystemUpgrade golang-googlecode-net-develUpgrade golang-binUpgrade golang-docsUpgrade golang-tests | Oct 11, 2022 | Jun 8, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Jun 8, 2022 |
| Debian | — | Upgrade golang-github-emicklei-go-restful | Jul 30, 2024 | Jun 8, 2022 |
| Dell Powerstore Dsa2025117 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 6, 2025 |
| Dell Powerstore Dsa2025147 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 27, 2025 |
| Dell Powerstore Dsa2025182 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Apr 17, 2025 |
| Suse | — | Upgrade containerized-data-importer-uploadserverUpgrade runcUpgrade kubevirt-virt-launcherUpgrade helm-zsh-completionUpgrade obs-service-kubevirt_containers_metaUpgrade helm-fish-completionUpgrade containerized-data-importer-operatorUpgrade catatonitUpgrade containerized-data-importer-importerUpgrade kubevirt-virt-handlerUpgrade kubevirt-virt-controllerUpgrade kubevirt-virtctlUpgrade trivyUpgrade containerized-data-importer-uploadproxyUpgrade kubevirt-testsUpgrade helm-bash-completionUpgrade helmUpgrade containerized-data-importer-controllerUpgrade kubevirt-manifestsUpgrade kubevirt-virt-operatorUpgrade containerdUpgrade kubevirt-container-diskUpgrade containerized-data-importer-apiUpgrade containerized-data-importer-clonerUpgrade containerd-develUpgrade containerized-data-importer-manifestsUpgrade obs-service-cdi_containers_metaUpgrade containerd-ctrUpgrade kubevirt-virt-api | Oct 26, 2022 | Jun 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 6, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub