Lucene search
GoogleOSV:CVE-2022-46792HistoryDec 08, 2022 - 6:15 a.m.
CVE-2022-46792
2022-12-0806:15:08
Google
osv.dev
8
hasura graphql engine
update many api
security vulnerability
postgres backend
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
High
EPSS
0.002
Percentile
54.2%
Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends. The fixed versions are 2.10.2, 2.11.3, 2.12.1, 2.13.2, 2.14.1, and 2.15.2. (Versions before 2.10.0 are unaffected.)
Related
prion
prion
Hardcoded credentials
2022-12-08 06:15:00
cve
cve
CVE-2022-46792
2022-12-08 06:15:08
cvelist
cvelist
CVE-2022-46792
2022-12-08 00:00:00
nvd
nvd
CVE-2022-46792
2022-12-08 06:15:08
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
High
EPSS
0.002
Percentile
54.2%
Related for OSV:CVE-2022-46792