VULNERABILITY INTELLIGENCE

CVE-2023-33189

CVSS score10 CRITICAL
EPSS probability0.92%
CISA KEVNot currently listed
Published2023-05-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Description

Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.

Weakness classification

  • security-advisories@github.com: CWE-285
  • nvd@nist.gov: NVD-CWE-Other

Primary references