← Back to browse · API

CVE-2023-33189

Severity
CRITICAL
CVSS
10.0
EPSS
0.00921
Risk score
40.32
CISA KEV
No
PoC
No
Published
2023-05-30
Modified
2025-01-10
First seen
2026-08-07
Aliases
EUVD-2023-1604, GHSA-PVRC-WVJ2-F59P
Products
pomerium:pomerium 0.18.0, < 0.18.1, pomerium:pomerium 0.19.0, < 0.19.2, pomerium:pomerium 0.20.0, < 0.20.1, pomerium:pomerium 0.21.0, < 0.21.4, pomerium:pomerium 0.22.0, < 0.22.2, pomerium:pomerium < 0.17.4
Sources
euvd EUVD-2023-1604

Description

Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.

References