~ / search / GHSA-vvjv-97j8-94xh

GHSA-vvjv-97j8-94xh

vantage6 vulnerable to Improper Preservation of Permissions

Source: GitHub Advisory Database (reviewed) High CVE-2023-22738

Packages

EcosystemPackageAffectedFixed in
PyPI vantage6 < 3.8.0 3.8.0

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Assigning existing users to a different organization is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain their permissions and therefore might be able to access stuff they should not be allowed to access. ### Patches Update to 3.8.0 ### Workarounds None ### References None ### For more information If you have any questions or comments about this advisory: * Email us at [[email protected]](mailto:[email protected])

References

External links from the advisory. They lead to third-party sites.