Threats tagged 'ghsa-x45g-v897-hmfm'

Eclipse BaSyx Go Components versions up to and including 1.1.2 contain an authorization bypass vulnerability in ABAC-enabled deployments of the Submodel Repository and the AAS Environment. This flaw allows an authenticated user with read access to a single Submodel Element to retrieve all elements of that Submodel via the list route, exposing unauthorized data. The issue is resolved in version 1.1.3.