CVE-2020-17520

Publication date

2020-12-18 20:48:08

Family

apache

State

PUBLISHED

Description

In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-managers admin, permission verification mechanism by constructing special URLs, thereby accessing any HTTP API.