Description
knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent calls.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
knowns-dev knowns
Default version status: unaffected
0 to < 0.30.0affected0.30.0unaffected
pkg:npm/knownsReferences
- https://github.com/knowns-dev/knowns/security/advisories/GHSA-w323-3wpx-f7g5 ↗
- https://github.com/knowns-dev/knowns/blob/v0.29.1/internal/permissions/registry.go#L99-L140 ↗
- https://github.com/knowns-dev/knowns/blob/v0.29.1/internal/permissions/guard.go#L44-L60 ↗
- https://github.com/knowns-dev/knowns/commit/a2c98fc5c313463576c9348beeec6a74ddd7333b ↗
- https://github.com/knowns-dev/knowns/releases/tag/v0.30.0 ↗
- https://www.vulncheck.com/advisories/knowns-before-0.30.0-authorization-bypass-via-misclassified-code-actions ↗