Executive brief
Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource in go.temporal.io/server
Affected products
- Go go.temporal.io/server
Junglewise Threat Intelligence
CVE-2023-3485: GO-2023-1879 - Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource in go.temporal.io/server
CVE-2023-3485 · Severity: low · CVSS 3.1 · Published 2024-08-20
Technologies: go.temporal.io/server (Go). Vendors: Go.
Related threats
- Temporal Server missing authentication in gRPC streaming interceptor
- Temporal Server authorization bypass in batch workflow operations
- GO-2026-4273 - Temporal has an Incorrect Authorization vulnerability in go.temporal.io/server
- GO-2025-4272 - Temporal has a namespace policy bypass allowing requests to be authorized for incorrect contexts in go.temporal.io/server
- GO-2025-3953 - Temporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling in go.temporal.io/server