CVE-2021-32787

    Dashboard / Vulnerabilities / CVE-2021-32787

    CVE-2021-32787

    Published: 2 Aug 2021Last Modified: 14 May 2024

    Summary:

    Details: Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leaks. The site-admin area can be accessed by regular users and all information and features are properly protected except for daily usage statistics and code intelligence uploads and indexes. It is not possible to alter the information, nor interact with any other features in the site-admin area. The issue is patched in version 3.30.0, where the information cannot be accessed by unprivileged users. There are no workarounds aside from upgrading.

    References: https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-mq5p-477h-xgwv, https://github.com/sourcegraph/sourcegraph/commit/6e51f4546368d959a1f9f173d16e5f20c55deb56

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -6e51f4546368d959a1f9f173d16e5f20c55deb56

    Affected versions

    v2.0.0
    v2.0.1
    v2.0.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-32787 | CVE-DB