How many CVEs have patched permissions?

2 published CVEs changed permissions in vantage6/vantage6, in 26 distinct patches totalling 79 changed lines, between 2023 and 2023.

What is the latest CVE that changed permissions?

CVE-2023-41882 (vantage6 Improper Access Control vulnerability), published 2023-10-11, changed lines 126 to 137 of vantage6-server/vantage6/server/resource/collaboration.py.

How does permissions compare to the rest of vantage6/vantage6?

vantage6/vantage6 has 16 CVEs with a located fix in total; 2 of them changed permissions.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

permissions in vantage6/vantage6: Patched by 2 CVEs

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/collaboration.py · lines 126–137 · +6 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/node.py · lines 71–92 · +8 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/organization.py · lines 106–107 · +2 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/role.py · lines 93–115 · +11 −2

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/run.py · lines 92–99 · +6 −3

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/task.py · lines 79–104 · +12 −5 in 2 hunks

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

vantage6 Improper Access Control vulnerability

CVE-2023-41882 · vantage6-server/vantage6/server/resource/user.py · lines 78–98 · +11 −4

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

Defining resource name as integer may give unintended access in vantage6

CVE-2023-28635 · vantage6-server/vantage6/server/resource/event.py · lines 91–94 · +4 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

Defining resource name as integer may give unintended access in vantage6

CVE-2023-28635 · vantage6-server/vantage6/server/resource/node.py · line 92 · +1 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

Defining resource name as integer may give unintended access in vantage6

CVE-2023-28635 · vantage6-server/vantage6/server/resource/organization.py · line 113 · +1 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

Defining resource name as integer may give unintended access in vantage6

CVE-2023-28635 · vantage6-server/vantage6/server/resource/role.py · line 111 · +1 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

Defining resource name as integer may give unintended access in vantage6

CVE-2023-28635 · vantage6-server/vantage6/server/resource/task.py · line 104 · +1 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

Defining resource name as integer may give unintended access in vantage6

CVE-2023-28635 · vantage6-server/vantage6/server/resource/user.py · line 100 · +1 −0

Medium · CVSS 5.3

EPSS 0.5%2023-10-11

permissions

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track vantage6/vantage6 CVEs