VDB
CVE-2024-32001
CVE-2024-32001
PUBLISHED
CVSS 2.200000047683716 LOW
SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used
EPSS 0.58% · 46.8th percentile
Risk Scores
CVSS 3.1
2.200000047683716
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.58%
46.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| authzed | spicedb | < 1.30.1, 0, < 1.30.1 |
| github.com | authzed/spicedb | 0, 0 |
Timeline
- Jan 21, 1970 Security Advisory
- Apr 10, 2024 CVE Published
- Apr 11, 2024 EPSS Score
- May 7, 2024 EPSS Score
- Jun 2, 2024 EPSS Score
- Jun 28, 2024 EPSS Score
- Jul 24, 2024 EPSS Score
- Aug 19, 2024 EPSS Score
- Sep 14, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 10, 2024 EPSS Score
- Nov 5, 2024 EPSS Score
References
- https://github.com/authzed/spicedb/commit/a244ed1edfaf2382711dccdb699971ec97190c7b fix
- https://github.com/authzed/spicedb/releases/tag/v1.30.1 fix
- https://github.com/authzed/spicedb/security/advisories/GHSA-j85q-46hg-36p2 advisory
- https://github.com/authzed/spicedb package
- https://nvd.nist.gov/vuln/detail/CVE-2024-32001 advisory