Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8sc5-uu9n-nyfz
Summary
Withdrawn Advisory: Teleport Access List owners can escalate their privileges
## Withdrawn Advisory
This advisory has been withdrawn because the vulnerability affects a binary, not a library in a [supported ecosystem](https://github.com/github/advisory-database#supported-ecosystems). Therefore, users of the library should not receive alerts. This link is maintained to preserve external references.

## Original Description

### Impact
Access Lists are a new feature introduced in Teleport 14 and currently under preview. An issue was discovered that allows an Access List Owner to assign arbitrary permissions, including permissions to themselves which could result in privilege escalation.

### Patches
Fixed in version 14.2.4 and 13.4.13
Aliases
0
alias GHSA-76cc-p55w-63g3
Fixed_packages
Affected_packages
References
0
reference_url https://github.com/gravitational/teleport
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/gravitational/teleport
1
reference_url https://github.com/gravitational/teleport/security/advisories/GHSA-76cc-p55w-63g3
reference_id
reference_type
scores
0
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/gravitational/teleport/security/advisories/GHSA-76cc-p55w-63g3
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8sc5-uu9n-nyfz