Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing attackers to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
StackStorm 安全漏洞
Vulnerability Description
StackStorm是一套事件驱动的自动化平台。该平台主要用于自动修复、安全响应、故障排除和程序部署等功能。 StackStorm 3.7.0版本存在安全漏洞，该漏洞源于Key-Value RBAC访问控制不当，没有检查Jinja过滤器中的权限，攻击者利用该漏洞可以访问其他用户的K/V对，可能导致敏感信息暴露。
CVSS Information
N/A
Vulnerability Type
N/A