GO-2023-2166
Dashboard / Vulnerabilities / GO-2023-2166
Summary: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb
Details: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb
References: https://github.com/authzed/spicedb/security/advisories/GHSA-jg7w-cxjv-98c2, https://nvd.nist.gov/vuln/detail/CVE-2023-46255, https://github.com/authzed/spicedb/commit/ae50421b80f895e4c98d999b18e06b6f1e6f1cf8
Affected packages
Package
Name: github.com/authzed/spicedb
Purl: pkg:golang/github.com/authzed/spicedb
Affected ranges
Type: SEMVER
Events:
Introduced- 0
Fixed -1.27.0-rc1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
