www.velocidex.com/golang/velociraptor vulnerabilities (Go)
8 vulnerabilities.
www.velocidex.com/golang/velociraptorGoVelociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin6.5 Mediumwww.velocidex.com/golang/velociraptorGoHTTP Filestore Endpoints Misapply Permissions Across Organizations6.8 Mediumwww.velocidex.com/golang/velociraptorGoVelociraptor EVTX Parser — Process Crash via Crafted .evtx File4.4 Mediumwww.velocidex.com/golang/velociraptorGoGetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations5.0 Mediumwww.velocidex.com/golang/velociraptorGoVelociraptor Query() Plugin Misapplies Permissions To Orgs8.0 Highwww.velocidex.com/golang/velociraptorGoVelociraptor priviledge escalation via UpdateConfig artifact5.5 Mediumwww.velocidex.com/golang/velociraptorGoRapid7 Velociraptor directory traversal in client ID parameter4.3 Mediumwww.velocidex.com/golang/velociraptorGoInsufficient permission check in the VQL copy() function8.8 High