Unrated severityNVD Advisory· Published Dec 18, 2020· Updated Aug 4, 2024

CVE-2020-17520

Description

In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by constructing special URLs, thereby accessing any HTTP API.

Affected products

Pulsar manager/Pulsar managerdescription
Apache/Pulsar managerllm-create
Range: =0.1.0

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/rb8b3025f8b507dec0b66791df408cdaf2d155866db1c7a1a4bc621cd%40%3Cdev.pulsar.apache.org%3Emitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000