Open-source package vulnerability · Go
CVE-2024-36536: fabedge has insecure permissions
criticalCVSS 4.0 9.1 · 3.1 7.4GHSA-c9cm-5j82-m6pj
Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Published Jul 24, 2024 · Updated Nov 18, 2024
Affected packages
github.com/fabedge/fabedge
- Ecosystem
- Go
- Affected
- <= 0.8.1
- Fixed in
- No patched version yet
- Check
go list -m github.com/fabedge/fabedge
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
Insecure permissions in fabedge v0.8.1 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology