cbcvebase.
CVE-2023-33189
published 2023-05-30

CVE-2023-33189: Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue…

PriorityP355critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.92%
55.8th percentile
Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.

Affected

17 ranges
VendorProductVersion rangeFixed in
github.compomerium_pomerium>= 0 < 0.17.40.17.4
github.compomerium_pomerium>= 0.18.0 < 0.18.10.18.1
github.compomerium_pomerium>= 0.19.0 < 0.19.20.19.2
github.compomerium_pomerium>= 0.20.0 < 0.20.10.20.1
github.compomerium_pomerium>= 0.21.0 < 0.21.40.21.4
github.compomerium_pomerium>= 0.22.0 < 0.22.20.22.2
pomeriumpomerium< 0.17.40.17.4
pomeriumpomerium——
pomeriumpomerium——
pomeriumpomerium——
pomeriumpomerium——
pomeriumpomerium——
pomeriumpomerium——
pomeriumpomerium——
pomeriumpomerium>= 0.19.0 < 0.19.20.19.2
pomeriumpomerium>= 0.21.0 < 0.21.40.21.4
pomeriumpomerium>= 0.22.0 < 0.22.20.22.2
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.