-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from missing authorization checks in REST endpoints handling resource access by ID. The descriptions indicate that authenticated users could access unauthorized resources by knowing the ID, suggesting insufficient privilege validation in functions responsible for fetching resources. The functions listed are common candidates for such flaws in RESTful systems. Confidence is medium due to the lack of explicit patch details, but the pattern aligns with CWE-269 and the described attack vector.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.streampipes:streampipes-parent | maven | < 0.97.0 | 0.97.0 |
JavaJavaOngoing coverage of React2Shell