CVE-2022-44009
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, poten…
Published: 2022-12-05 · CVSS: 7.5 · CVSS 3.1
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7