Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project.
References
Link | Resource |
---|---|
https://github.com/line/centraldogma/pull/621 | Patch Third Party Advisory |
Configurations
History
No history.
Information
Published : 2021-09-08 18:15
Updated : 2022-07-12 17:42
NVD link : CVE-2021-38388
Mitre link : CVE-2021-38388
CVE.ORG link : CVE-2021-38388
JSON object : View
Products Affected
linecorp
- central_dogma
CWE
CWE-862
Missing Authorization