Auth bypass in Labring Sealos
CVE-2023-36815
Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is a permission flaw in the Sealos billing system, which allows users to control the recharge resource account `sealos[.] io/v1/Payment`, resulting in the ability to recharge any amount of 1 renminbi (RMB). The charging interface may expose resource information. The namespace of this custom resource would be user's control and may have permission to correct it. It is not clear whether a fix exists.
Vulnerability class: Broken Access Control
EPSS: 0.005 (42.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N.
Affected products
- Labring Sealos — versions <= 4.2.0
- Sealos
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2023-36815?
- CVE-2023-36815 is a high-severity vulnerability in Labring Sealos, classified under Missing Authorization. CVSS score: 7.3/10. Published 2023-07-03.
- How severe is CVE-2023-36815?
- High severity. CVSS v3 base score is 7.3 out of 10.