Sensitive Data Disclosure Vulnerability (DOPPLER-SA-0001)

Summary

It was found that an authenticated user with group.edit privileges could move a group to a parent group the user did not have access to. Potentially exposing group specific configuration templates, settings and other privileged information.

Remediation

Customers should update to v22.12 or later.

Affected Versions

• v22.09.13 and earlier versions of Doppler