CVE-2022-38817
Dapr Dashboard vulnerable to Incorrect Access Control
CVE-2022-38817 is a high vulnerability (CVSS 7.5) in Linuxfoundation Dapr Dashboard, published October 3, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.93%, the 90th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 3.1, NVD
- Exploit chance
- 3.93%EPSS, 90th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/dapr/dashboardGo | 0.1.0 to 0.10.0 | None known |
github.com/dapr/dashboardGo | 0.1.0 and later | None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Nuclei | Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control |
What each source reports
NVD Score used
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
- Record
CVE-2022-38817- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
CVE ListNo score
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
- Record
CVE-2022-38817- Updated
- 2026-11-02
EUVDEUVD-2022-6996No score
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
- Record
EUVD-2022-6996- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2w6m-q946-399r
Dapr Dashboard vulnerable to Incorrect Access Control
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
- Record
GHSA-2w6m-q946-399r- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
OSVGHSA-2w6m-q946-399r
Dapr Dashboard vulnerable to Incorrect Access Control
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
- Record
GHSA-2w6m-q946-399r- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
OSVNo score
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
- Record
CVE-2022-38817- Updated
- 2026-11-02
OSVGO-2022-1033No score
Dapr Dashboard vulnerable to Incorrect Access Control in github.com/dapr/dashboard
Dapr Dashboard vulnerable to Incorrect Access Control in github.com/dapr/dashboard
- Record
GO-2022-1033- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Nuclei, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.