Threats tagged 'ghsa-4xhx-g43j-j7vj'

1 threat

Threats tagged 'ghsa-4xhx-g43j-j7vj'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.8	EPSS 0.2%	CVE-2026-105049Attu · Missing Authentication for Critical Function Medium5.8EPSS 0.2%2026-10-02CVE Database V5CVE-2026-105049 Zilliz Attu versions from 2.6.5 up to but not including 3.0.0 contain a vulnerability in the Playground feature that allows proxying arbitrary HTTP and HTTPS requests without requiring authentication. This missing authentication for a critical function could allow unauthorized users to misuse the proxy capability. The vulnerability has a medium severity with a CVSS score of 5.8. EPSS 0.2%Vulnerability Zilliz #cwe-306 #ghsa-4xhx-g43j-j7vj	CVE Database V5	2026-10-02

Showing 1–1 of 1 result