CVE-2022-32169

CVE-2022-32169: bytebase - Improper Authorization

Vendor Bytebase
Product bytebase
Weakness CWE-285
Published September 28, 2022
Last update May 21, 2025

CVSS base score

What the vulnerability does

01Description

The “Bytebase” application does not restrict low privilege user to access “admin issues“ for which an unauthorized user can view the “OPEN” and “CLOSED” issues by “Admin” and the affected endpoint is “/issue”.

Key dates

02Disclosure timeline

September 28, 2022 CVE published
May 21, 2025 Record updated