~ / search / GHSA-gc57-xhh5-m94r

GHSA-gc57-xhh5-m94r

Improper Access Control in vantage6

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-41882

Packages

EcosystemPackageAffectedFixed in
PyPI vantage6 < 4.0.0 4.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact The endpoint /api/collaboration/{id}/task is used to collect all tasks from a certain collaboration. To get such tasks, a user should have permission to view the collaboration and to view the tasks in it. However, currently it is only checked if the user has permission to view the collaboration. ### Patches No ### Workarounds None ### References None ### For more information If you have any questions or comments about this advisory: * Email us at [[email protected]](mailto:[email protected])

References

External links from the advisory. They lead to third-party sites.