CVE-2023-45822 (hub)

Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which a default unsafe rego built-in was allowed to be used when defining authorization policies. Artifact Hub includes a fine-grained authorization mechanism that allows organizations to define what actions can be performed by their members. It is based on customizable authorization policies that are enforced by …

application artifact audit authorization base bug cncf code code base cve default mechanism packages policies projects publishing rego researcher s code security security audit security researcher web