CVE-2024-43397 — Potential unauthorized access issue in apollo-portal
Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permissio…
Published: 2024-08-20 · CVSS: 4.3 · CVSS 3.1
Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed with an input parameter check which was released in version 2.3.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7