CVE-2022-38817

Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-10-03

Last modified

2024-08-03

Weaknesses

CWE-306

Affected products

• Dapr Dashboard (Linuxfoundation)

References

• https://github.com/dapr/dashboard
• https://github.com/dapr/dashboard/issues/222