VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 6, 2022· Updated Jun 17, 2026

CVE-2022-44009

CVE-2022-44009

Description

Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Stackstorm/StackStorm2 versions
    cpe:2.3:a:stackstorm:stackstorm:3.7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:stackstorm:stackstorm:3.7.0:*:*:*:*:*:*:*
    • (no CPE)range: <3.7.0
  • StackStorm/StackStormdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.