The Bytebase application does not restrict low privilege user to access admin issues for which an unauthorized user can view the OPEN and CLOSED issues by Admin and the affected endpoint is /issue.
GSA_kwCzR0hTQS01cmM0LXY1bWotZzhjNM4AAvHH
Bytebase does not restrict low privilege user to access admin issues
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
go:github.com/bytebase/bytebase
PURL:
pkg:go/github.com%2Fbytebase%2Fbytebase
|
>= 0.1.0, <= 1.0.4 | No known fixed version | |
Affected Version RangesAll affected versionsv1.0.0, v1.0.1, v1.0.2 |
|||