-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of 'exclude' policies when the resource is a wildcard. The pre-patch code in both matchers directly flipped the match result (ret = !ret) for excludes, without considering whether the resource represented all possible values (via null, empty string, or '*'). The patch introduced: 1) isAllValuesRequested to detect wildcard requests, and 2) applyExcludes to conditionally invert results only when appropriate. The vulnerable functions are the original isMatch implementations that lacked this contextual handling, as evidenced by their direct negation logic being replaced in the commit diff.
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.ranger:ranger | maven | >= 0.5.0, < 0.5.2 | 0.5.2 |
Ongoing coverage of React2Shell