← All advisories

Critical severity9.8NVD Advisory· Published Dec 18, 2023· Updated Jun 17, 2026

CVE-2023-50976

CVE-2023-50976

Description

Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Redpanda/Redpanda2 versions
cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*range: <23.1.21
- (no CPE)
redpanda-data/Redpandallm-fuzzy
Range: <23.1.21, <23.2.18

Patches

Vulnerability mechanics

References

5

github.com/redpanda-data/redpanda/pull/14969nvdIssue TrackingPatch
github.com/redpanda-data/redpanda/pull/15060nvdIssue TrackingPatch
github.com/redpanda-data/redpanda/issues/15048nvdExploitIssue Tracking
github.com/redpanda-data/redpanda/compare/v23.1.20...v23.1.21nvdRelease Notes
github.com/redpanda-data/redpanda/compare/v23.2.17...v23.2.18nvdRelease Notes

News mentions

0

No linked articles in our index yet.