{"id":"CVE-2023-50976","details":"Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API.","modified":"2026-08-12T03:51:10.304522647Z","published":"2023-12-17T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50976.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://github.com/redpanda-data/redpanda/compare/v23.1.20...v23.1.21"},{"type":"WEB","url":"https://github.com/redpanda-data/redpanda/compare/v23.2.17...v23.2.18"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50976.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50976"},{"type":"REPORT","url":"https://github.com/redpanda-data/redpanda/issues/15048"},{"type":"FIX","url":"https://github.com/redpanda-data/redpanda/pull/14969"},{"type":"FIX","url":"https://github.com/redpanda-data/redpanda/pull/15060"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/redpanda-data/redpanda","events":[{"introduced":"0"},{"fixed":"0d3373a0f4153ca5160983f6f3a58bb68d864875"},{"introduced":"27c0c49a6a722e5353e3eab6a53d88516a162790"},{"fixed":"d79db9a9c053b9f2da53671a559873f5ca442ff5"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"23.1.21"},{"introduced":"23.2.0"},{"fixed":"23.2.18"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:redpanda:redpanda:*:*:*:*:*:*:*:*"}}],"versions":["v23.1.21-rc1","v23.2.18-rc2","v23.2.18-rc1","v23.2.17-rc1","v23.2.17","v23.2.16-rc2","v23.2.16","v23.2.16-rc1","v23.2.15-rc2","v23.2.15","v23.2.15-rc1","v23.1.20","v23.1.20-rc1","v23.2.14-rc1","v23.2.14","v23.2.13","v23.2.13-rc1","v23.1.19-rc3","v23.1.19","v23.1.19-rc2","v23.1.19-rc1","v23.2.12-rc2","v23.2.12","v23.2.12-rc1","v23.2.11","v23.2.11-rc1","v23.2.10","v23.2.10-rc1","v23.2.9-rc3","v23.2.9","v23.2.9-rc2","v23.2.9-rc1","v23.1.18-rc2","v23.1.18","v23.1.18-rc1","v23.2.8-rc4","v23.2.8","v23.2.8-rc3","v23.1.17","v23.2.8-rc2","v23.2.8-rc1","v23.1.17-rc1","v23.2.7-rc1","v23.2.7","v23.2.6","v23.1.16","v23.1.16-rc1","v23.2.6-rc1","v23.2.5","v23.2.5-rc1","v23.2.4","v23.2.4-rc1","v23.2.1-rc6","v23.1.15-rc1","v23.1.15","v23.1.14","v23.2.3","v23.1.14-rc1","v23.2.3-rc2","v23.2.3-rc1","v23.2.2-rc1","v23.2.2","v23.2.1-rc10","v23.2.1","v23.2.1-rc9","v23.2.1-rc8","v23.2.1-rc7","v23.2.1-rc5","v23.2.1-rc4","v23.1.13-rc1","v23.1.13","v23.1.12-rc1","v23.1.12","v23.2.1-rc3","v23.2.1-rc2","v23.2.1-rc1","v23.1.11-rc1","v23.1.11","v23.1.10-rc2","v23.1.10","v23.1.10-rc1","v23.1.9-rc2","v23.1.9","v23.1.9-rc1","v23.1.8-rc2","v23.1.8","v23.1.8-rc1","v23.1.7-rc3","v23.1.7","v23.1.7-rc2","v23.1.7-rc1","v23.1.6-rc1","v23.1.6","v23.1.5","v23.1.5-rc1","v23.1.4-rc3","v23.1.4","v23.1.4-rc2","v23.1.4-rc1","v23.1.3","v23.1.3-rc1","v23.1.2","v23.1.2-rc3","v23.1.2-rc2","v23.1.2-rc1","v23.2.0-dev","v23.1.1","v23.1.1-rc7","v23.1.1-rc8","v23.1.1-rc6","v23.1.1-rc5","v23.1.1-rc4","v23.1.1-rc2","v23.1.1-rc3","v23.1.1-rc1","v22.3.1-rc5","v23.1.0-dev","v22.3.1-rc4","v22.3.1-rc3","v22.3.1-rc2","v22.3.1-rc1","v22.3.0-dev","v22.2.1-rc3","v22.2.1-rc2","v22.2.1-rc1","v22.1.1-rc1","v21.10.1-beta2","v21.12.1-wasm-beta1","v21.11.1-beta1","v21.10.1-beta1","v21.9.1-beta1","v21.8.1-beta2","v21.8.1-beta1","v21.7.6","v21.7.5","v21.6.6","v21.7.3","v21.7.2","v21.7.1","v21.6.5","v21.6.4","v21.6.3","v21.6.2","v21.6.1","v21.5.7","v21.5.6","v21.5.6-beta1","v21.5.5","v21.5.4","v21.5.3","v21.5.2","v21.5.2-beta2","v21.5.2-beta3","v21.5.2-beta1","v21.5.1","v21.4.13","v21.4.16-beta1","v21.4.14","v21.4.15","v21.4.11","v21.4.12","v21.4.10","v21.4.9","v21.4.8","v21.4.7","v21.4.6","v21.4.3","v21.4.5","v21.4.4","v21.4.1","v21.4.2","v21.3.7","v21.3.6-beta1","v21.3.6","v21.3.5-beta6","v21.3.5","v21.3.5-beta5","v21.3.5-beta4","v21.3.5-beta3","v21.3.5-beta2","v21.3.5-beta1","v21.3.4-beta1","v21.3.4","v21.3.3","v21.3.2","v21.3.1","v21.2.2","v21.2.1","v21.1.5","v21.1.4","v21.1.3","v21.1.2","v21.1.1","v20.12.9","v20.12.7","v20.12.6","release-20.12.2","v20.12.5","release-20.12.5","release-20.12.4","release-20.12.3","release-20.12.1","release-20.11.6","release-20.11.5","release-20.11.2","release-20.11.4","release-20.11.3","release-20.11.1","release-0.99.24"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50976.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}