Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:41719
HistoryJul 25, 2023 - 11:10 a.m.

Authentication Bypass

2023-07-2511:10:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
vulnerability
dapr
authentication
bypass
http requests

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

34.2%

JSON

github.com/dapr/dapr is vulnerable to Authentication Bypass. The library allows bypassing of API token authentication, which enables an attacker to send unauthorized HTTP requests via the Dapr sidecar, only impacting users who rely on this authentication method.

Related

cve 1
github 1
prion 1
nvd 1
cvelist 1
osv 2
cve
cve
CVE-2023-37918
2023-07-21 21:15:11
github
github
Dapr API token authentication bypass in HTTP endpoints
2023-07-21 20:17:36
prion
prion
Design/Logic Flaw
2023-07-21 21:15:00
nvd
nvd
CVE-2023-37918
2023-07-21 21:15:11
cvelist
cvelist
CVE-2023-37918 API token authentication bypass in HTTP endpoints in Dapr
2023-07-21 20:08:00
osv
osv
Dapr API token authentication bypass in HTTP endpoints
2023-07-21 20:17:36
CVE-2023-37918
2023-07-21 21:15:11

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

34.2%

JSON
Related for VERACODE:41719
cve1github1prion1nvd1cvelist1osv2