Vulnerability in bytebase

[ Description ]Official description

Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to read execution logs, database session details, and rollback SQL from other projects.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/bytebase/bytebase
• github.com/bytebase/bytebase/blob/3.15.1/backend/api/v1/rollout_service.go
• github.com/bytebase/bytebase/commit/bb553e8423b38c826cd7b1da5c7117080cc8705d
• github.com/bytebase/bytebase/issues/19369
• github.com/bytebase/bytebase/pull/19554
• github.com/bytebase/bytebase/releases/tag/3.16.0
• www.vulncheck.com/advisories/bytebase-before-3.16.0-authorization-bypass-via-rollout-se…