id: GO-2022-0519
modules:
    - module: github.com/flyteorg/flyteadmin
      versions:
        - fixed: 1.1.31
      vulnerable_at: 1.1.30
      packages:
        - package: github.com/flyteorg/flyteadmin/auth/authzserver
          symbols:
            - ResourceServer.ValidateAccessToken
summary: Improper validation of access tokens in github.com/flyteorg/flyteadmin
description: Improper validation of access tokens can permit use of expired tokens.
published: 2022-07-30T03:51:07Z
cves:
    - CVE-2022-31145
ghsas:
    - GHSA-qwrj-9hmp-gpxh
references:
    - fix: https://github.com/flyteorg/flyteadmin/commit/a1ec282d02706e074bc4986fd0412e5da3b9d00a