critical9.8
CVE-2023-50976
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
Impact
Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redpanda | Redpanda | before 23.1.21 from 23.2.0 before 23.2.18 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/redpanda-data/redpanda/compare/v23.1.20...v23.1.21
- https://github.com/redpanda-data/redpanda/compare/v23.2.17...v23.2.18
- https://github.com/redpanda-data/redpanda/issues/15048
- https://github.com/redpanda-data/redpanda/pull/14969
- https://github.com/redpanda-data/redpanda/pull/15060
- https://github.com/redpanda-data/redpanda/compare/v23.1.20...v23.1.21
- https://github.com/redpanda-data/redpanda/compare/v23.2.17...v23.2.18
- https://github.com/redpanda-data/redpanda/issues/15048
- https://github.com/redpanda-data/redpanda/pull/14969
- https://github.com/redpanda-data/redpanda/pull/15060