CVE-2023-22834 — The contour service was not checking that users had permission to create an analysis for a given dataset
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extrane…
Published: 2023-06-26 · CVSS: 2.7 · CVSS 3.1
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7