Privilege Escalation
Discription
github.com/mosn/mosn is vulnerable to Privilege Escalation. The vulnerability exists due to the `prefixMatcher` function in `matcher.go` while using JWT authorization, which is case-sensitive to the prefix that the URL matches, which may result in authentication bypass.Read More
References
https://github.com/mosn/mosn/issues/1633https://github.com/mosn/mosn/commit/b3b875c7c0436a7f30d2498138e782ad6d450724https://github.com/mosn/mosn/pull/1637CVSS3
- Attack Vector
- Attack Complexity
- Privileges Required
- User Interaction
- Scope
- Confidentiality Impact
- Integrity Impact
- Availability Impact
- Network
- Low
- None
- None
- Unchanged
- High
- High
- High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Back to Main