7.5
CVSSv3

CVE-2022-44009

Published: 06/12/2022 Updated: 07/12/2022
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

Improper access control in Key-Value RBAC in StackStorm version 3.7.0 didn't check the permissions in Jinja filters, allowing malicious users to access K/V pairs of other users, potentially leading to the exposure of sensitive Information.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

stackstorm stackstorm 3.7.0