user

Mar 15, 2021 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 5, 2021 GO-2026-4416

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 30, 2024 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserCommonService

+ BuildRoleFilterForAllTypes func(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ BuildRoleFilterKeyForCluster func(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ BuildRoleFilterKeyForJobs func(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ BuildRoleFilterKeyForOtherEntity func(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ GetUniqueKeyForAllEntity func(role repository2.RoleModel) string

type UserCommonServiceImpl

+ func (impl UserCommonServiceImpl) BuildRoleFilterForAllTypes(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ func (impl UserCommonServiceImpl) BuildRoleFilterKeyForCluster(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ func (impl UserCommonServiceImpl) BuildRoleFilterKeyForJobs(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ func (impl UserCommonServiceImpl) BuildRoleFilterKeyForOtherEntity(roleFilterMap map[string]*bean.RoleFilter, role repository2.RoleModel, ...)

+ func (impl UserCommonServiceImpl) GetUniqueKeyForAllEntity(role repository2.RoleModel) string

Dec 15, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 14, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const AllWorkflow

type RoleGroupServiceImpl

+ func (impl RoleGroupServiceImpl) CreateOrUpdateRoleGroupForJobsEntity(roleFilter bean.RoleFilter, userId int32, model *repository2.RoleGroup, ...) ([]casbin2.Policy, error)

+ func (impl RoleGroupServiceImpl) CreateOrUpdateRoleGroupForOtherEntity(roleFilter bean.RoleFilter, request *bean.RoleGroup, ...) ([]casbin2.Policy, error)

Dec 7, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 30, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 29, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 20, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 15, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 14, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 23, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const ConcurrentRequestLockError

+ const ConcurrentRequestUnlockError

Aug 13, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 17, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 3, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 28, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 27, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 14, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 9, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 1, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 1, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type RbacRoleService interface

+ GetAllDefaultRoles func() ([]*bean.RbacRoleDto, error)

+ type RbacRoleServiceImpl struct

+ func NewRbacRoleServiceImpl(logger *zap.SugaredLogger, ...) *RbacRoleServiceImpl

+ func (impl *RbacRoleServiceImpl) GetAllDefaultRoles() ([]*bean.RbacRoleDto, error)

type UserCommonService

+ CreateDefaultPoliciesForAllTypes func(...) (bool, error, []casbin.Policy)

type UserCommonServiceImpl

+ func (impl UserCommonServiceImpl) CreateDefaultPoliciesForAllTypes(...) (bool, error, []casbin.Policy)

+ func (impl UserCommonServiceImpl) CreateDefaultPoliciesForAllTypesV2(...) (bool, error, []casbin.Policy)

+ type UserRbacConfig struct

+ UseRbacCreationV2 bool

May 25, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 23, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserCommonService

+ GetCapacityForRoleFilter func(roleFilters []bean.RoleFilter) (int, map[int]int)

+ RemovePlaceHolderInRoleFilterField func(roleFilterField string) string

+ ReplacePlaceHolderForEmptyEntriesInRoleFilter func(roleFilter bean.RoleFilter) bean.RoleFilter

type UserCommonServiceImpl

+ func (impl UserCommonServiceImpl) GetCapacityForRoleFilter(roleFilters []bean.RoleFilter) (int, map[int]int)

+ func (impl UserCommonServiceImpl) RemovePlaceHolderInRoleFilterField(roleFilterField string) string

+ func (impl UserCommonServiceImpl) ReplacePlaceHolderForEmptyEntriesInRoleFilter(roleFilter bean.RoleFilter) bean.RoleFilter

type UserServiceImpl

+ func (impl UserServiceImpl) CreateOrUpdateUserRolesForAllTypes(roleFilter bean.RoleFilter, userId int32, model *repository2.UserModel, ...) ([]casbin2.Policy, bool, error)

Apr 11, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 28, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 28, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 27, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 31, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const AllGroup

+ const AllKind

+ const AllNamespace

+ const AllResource

type RoleGroupServiceImpl

+ func (impl RoleGroupServiceImpl) CreateOrUpdateRoleGroupForClusterEntity(roleFilter bean.RoleFilter, userId int32, model *repository2.RoleGroup, ...) ([]casbin2.Policy, error)

type UserCommonService

+ CheckRbacForClusterEntity func(cluster, namespace, group, kind, resource, token string, ...) bool

type UserCommonServiceImpl

+ func (impl UserCommonServiceImpl) CheckRbacForClusterEntity(cluster, namespace, group, kind, resource, token string, ...) bool

type UserServiceImpl

+ func (impl UserServiceImpl) CreateOrUpdateUserRolesForClusterEntity(roleFilter bean.RoleFilter, userId int32, model *repository2.UserModel, ...) ([]casbin2.Policy, bool, error)

Jan 17, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 9, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jan 3, 2023 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 14, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 9, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 2, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 2, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 23, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 16, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 10, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 3, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserAudit

+ UpdatedOn time.Time

type UserAuditService

+ GetLatestUser func() (*UserAudit, error)

+ Update func(userAudit *UserAudit) error

type UserAuditServiceImpl

+ func (impl UserAuditServiceImpl) GetLatestUser() (*UserAudit, error)

+ func (impl UserAuditServiceImpl) Update(userAudit *UserAudit) error

type UserAuthService

+ HandleLoginWithClientIp func(username, password, clientIp string) (string, error)

type UserAuthServiceImpl

+ func (impl UserAuthServiceImpl) HandleLoginWithClientIp(username, password, clientIp string) (string, error)

type UserService

+ SaveLoginAudit func(emailId, clientIp string, id int32)

type UserServiceImpl

+ func (impl UserServiceImpl) SaveLoginAudit(emailId, clientIp string, id int32)

Oct 18, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 24, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserService

+ GetRoleFiltersByGroupNames func(groupNames []string) ([]bean.RoleFilter, error)

type UserServiceImpl

+ func (impl UserServiceImpl) GetRoleFiltersByGroupNames(groupNames []string) ([]bean.RoleFilter, error)

Sep 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type RoleGroupService

+ FetchDetailedRoleGroups func() ([]*bean.RoleGroup, error)

type RoleGroupServiceImpl

+ func (impl RoleGroupServiceImpl) FetchDetailedRoleGroups() ([]*bean.RoleGroup, error)

type UserService

+ GetAllDetailedUsers func() ([]bean.UserInfo, error)

type UserServiceImpl

+ func (impl UserServiceImpl) GetAllDetailedUsers() ([]bean.UserInfo, error)

Sep 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 30, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 22, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 19, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 19, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type SelfRegistrationRolesService

+ CheckAndCreateUserIfConfigured func(emailId string) bool

type SelfRegistrationRolesServiceImpl

+ func (impl *SelfRegistrationRolesServiceImpl) CheckAndCreateUserIfConfigured(emailId string) bool

Jul 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 5, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 29, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 27, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 23, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 22, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 17, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 14, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 9, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type UserAudit struct

+ ClientIp string

+ CreatedOn time.Time

+ UserId int32

+ type UserAuditService interface

+ GetLatestByUserId func(userId int32) (*UserAudit, error)

+ Save func(userAudit *UserAudit) error

+ type UserAuditServiceImpl struct

+ func NewUserAuditServiceImpl(logger *zap.SugaredLogger, userAuditRepository repository2.UserAuditRepository) *UserAuditServiceImpl

+ func (impl UserAuditServiceImpl) GetLatestByUserId(userId int32) (*UserAudit, error)

+ func (impl UserAuditServiceImpl) Save(userAudit *UserAudit) error

Jun 6, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 31, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserService

+ GetEmailFromToken func(token string) (string, error)

type UserServiceImpl

+ func (impl UserServiceImpl) GetEmailFromToken(token string) (string, error)

May 30, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 30, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 27, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 20, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 18, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 17, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type CheckResponse struct

+ Enabled bool

+ Roles []string

+ type SelfRegistrationRolesService interface

+ Check func() (CheckResponse, error)

+ SelfRegister func(emailId string)

+ type SelfRegistrationRolesServiceImpl struct

+ func NewSelfRegistrationRolesServiceImpl(logger *zap.SugaredLogger, ...) *SelfRegistrationRolesServiceImpl

+ func (impl *SelfRegistrationRolesServiceImpl) Check() (CheckResponse, error)

+ func (impl *SelfRegistrationRolesServiceImpl) GetAll() ([]string, error)

+ func (impl *SelfRegistrationRolesServiceImpl) SelfRegister(emailId string)

type UserService

+ SelfRegisterUserIfNotExists func(userInfo *bean.UserInfo) ([]*bean.UserInfo, error)

type UserServiceImpl

+ func (impl UserServiceImpl) SelfRegisterUserIfNotExists(userInfo *bean.UserInfo) ([]*bean.UserInfo, error)

May 10, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 2, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 17, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 13, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 7, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Apr 1, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 29, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 21, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 14, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 10, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 4, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 25, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Feb 14, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserAuthService

+ DeleteRoles func(entityType string, entityName string, tx *pg.Tx) error

type UserAuthServiceImpl

+ func (impl UserAuthServiceImpl) DeleteRoles(entityType string, entityName string, tx *pg.Tx) (err error)

type UserService

+ UpdateTriggerPolicyForTerminalAccess func() (err error)

type UserServiceImpl

+ func (impl UserServiceImpl) UpdateTriggerPolicyForTerminalAccess() (err error)

Feb 7, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ type UserCommonService interface

+ RemoveRolesAndReturnEliminatedPolicies func(userInfo *bean.UserInfo, existingRoleIds map[int]repository2.UserRoleModel, ...) ([]casbin2.Policy, error)

+ RemoveRolesAndReturnEliminatedPoliciesForGroups func(request *bean.RoleGroup, ...) ([]casbin2.Policy, error)

+ type UserCommonServiceImpl struct

+ func NewUserCommonServiceImpl(userAuthRepository repository2.UserAuthRepository, logger *zap.SugaredLogger, ...) *UserCommonServiceImpl

+ func (impl UserCommonServiceImpl) RemoveRolesAndReturnEliminatedPolicies(userInfo *bean.UserInfo, existingRoleIds map[int]repository2.UserRoleModel, ...) ([]casbin2.Policy, error)

+ func (impl UserCommonServiceImpl) RemoveRolesAndReturnEliminatedPoliciesForGroups(request *bean.RoleGroup, ...) ([]casbin2.Policy, error)

Jan 8, 2022 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 29, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 23, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 17, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 16, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 13, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ func WhitelistChecker(url string) bool

type UserService

+ UserExists func(emailId string) bool

type UserServiceImpl

+ func (impl UserServiceImpl) UserExists(emailId string) bool

Dec 9, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Dec 2, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 29, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 27, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 27, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 26, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 23, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 20, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 18, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 11, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Nov 3, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 29, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 21, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Oct 10, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type UserService

+ GetByIdIncludeDeleted func(id int32) (*bean.UserInfo, error)

type UserServiceImpl

+ func (impl UserServiceImpl) GetByIdIncludeDeleted(id int32) (*bean.UserInfo, error)

Sep 28, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 27, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 23, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ const AllEnvironment

Sep 9, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Sep 2, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 27, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 26, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 24, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 20, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 13, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Aug 10, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 28, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 20, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 16, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 9, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jul 2, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 28, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 17, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Jun 1, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 24, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 23, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

May 5, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

type RoleGroupService

+ FetchRolesForGroups func(groupNames []string) ([]*bean.RoleFilter, error)

type RoleGroupServiceImpl

+ func (impl RoleGroupServiceImpl) FetchRolesForGroups(groupNames []string) ([]*bean.RoleFilter, error)

Apr 23, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 15, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 15, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 15, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Mar 15, 2021 GO-2024-3260 +1 more

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

  GO-2026-4416: Devtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage in github.com/devtron-labs/devtron

Changes in this version

+ var Claims struct

+ var CookieExpirationTime int

+ var JwtExpirationTime int

+ func Authorizer(e *casbin.Enforcer, sessionManager *session.SessionManager) func(next http.Handler) http.Handler

+ type ACDAuthConfig struct

+ ACDConfigMapName string

+ ACDConfigMapNamespace string

+ ACDPassword string

+ ACDUsername string

+ func GetACDAuthConfig() (*ACDAuthConfig, error)

+ type DexConfig struct

+ CStoreKey string

+ ClientID string

+ ClientSecret string

+ CookieExpirationTime int

+ DexJwtKey string

+ DexURL string

+ JwtExpirationTime int

+ RedirectURL string

+ func GetConfig() (*DexConfig, error)

+ type RoleGroupService interface

+ CreateRoleGroup func(request *bean.RoleGroup) (*bean.RoleGroup, error)

+ DeleteRoleGroup func(model *bean.RoleGroup) (bool, error)

+ FetchRoleGroups func() ([]*bean.RoleGroup, error)

+ FetchRoleGroupsById func(id int32) (*bean.RoleGroup, error)

+ FetchRoleGroupsByName func(name string) ([]*bean.RoleGroup, error)

+ UpdateRoleGroup func(request *bean.RoleGroup) (*bean.RoleGroup, error)

+ type RoleGroupServiceImpl struct

+ func NewRoleGroupServiceImpl(userAuthRepository repository.UserAuthRepository, ...) *RoleGroupServiceImpl

+ func (impl RoleGroupServiceImpl) CreateRoleGroup(request *bean.RoleGroup) (*bean.RoleGroup, error)

+ func (impl RoleGroupServiceImpl) DeleteRoleGroup(bean *bean.RoleGroup) (bool, error)

+ func (impl RoleGroupServiceImpl) FetchRoleGroups() ([]*bean.RoleGroup, error)

+ func (impl RoleGroupServiceImpl) FetchRoleGroupsById(id int32) (*bean.RoleGroup, error)

+ func (impl RoleGroupServiceImpl) FetchRoleGroupsByName(name string) ([]*bean.RoleGroup, error)

+ func (impl RoleGroupServiceImpl) UpdateRoleGroup(request *bean.RoleGroup) (*bean.RoleGroup, error)

+ type TokenCache struct

+ func NewTokenCache(logger *zap.SugaredLogger, aCDAuthConfig *ACDAuthConfig, ...) *TokenCache

+ func (impl *TokenCache) BuildACDSynchContext() (acdContext context.Context, err error)

+ type User struct

+ type UserAuthService interface

+ AuthVerification func(r *http.Request) (bool, error)

+ CreateRole func(roleData *bean.RoleData) (bool, error)

+ DeleteRole func(role string) (bool, error)

+ GetAllRole func() ([]bean.Role, error)

+ GetRoleByFilter func(entity string, team string, app string, env string, act string) (bean.Role, error)

+ GetRolesByUserId func(userId int32) ([]bean.Role, error)

+ HandleDexCallback func(w http.ResponseWriter, r *http.Request)

+ HandleLogin func(username string, password string) (string, error)

+ HandleRefresh func(w http.ResponseWriter, r *http.Request)

+ UpdateRole func(roleData *bean.RoleData) (bool, error)

+ type UserAuthServiceImpl struct

+ func NewUserAuthServiceImpl(userAuthRepository repository.UserAuthRepository, ...) *UserAuthServiceImpl

+ func (impl UserAuthServiceImpl) AuthVerification(r *http.Request) (bool, error)

+ func (impl UserAuthServiceImpl) CreateRole(roleData *bean.RoleData) (bool, error)

+ func (impl UserAuthServiceImpl) DeleteRole(role string) (bool, error)

+ func (impl UserAuthServiceImpl) GetAllRole() ([]bean.Role, error)

+ func (impl UserAuthServiceImpl) GetRoleByFilter(entity string, team string, app string, env string, act string) (bean.Role, error)

+ func (impl UserAuthServiceImpl) GetRolesByUserId(userId int32) ([]bean.Role, error)

+ func (impl UserAuthServiceImpl) HandleDexCallback(w http.ResponseWriter, r *http.Request)

+ func (impl UserAuthServiceImpl) HandleLogin(username string, password string) (string, error)

+ func (impl UserAuthServiceImpl) HandleRefresh(w http.ResponseWriter, r *http.Request)

+ func (impl UserAuthServiceImpl) UpdateRole(roleData *bean.RoleData) (bool, error)

+ type UserService interface

+ CheckUserRoles func(id int32) ([]string, error)

+ CreateUser func(userInfo *bean.UserInfo) ([]*bean.UserInfo, error)

+ DeleteUser func(userInfo *bean.UserInfo) (bool, error)

+ GetAll func() ([]bean.UserInfo, error)

+ GetById func(id int32) (*bean.UserInfo, error)

+ GetByIds func(ids []int32) ([]bean.UserInfo, error)

+ GetLoggedInUser func(r *http.Request) (int32, error)

+ GetUserByEmail func(emailId string) (*bean.UserInfo, error)

+ GetUserByToken func(token string) (int32, error)

+ GetUsersByFilter func(size int, from int) ([]bean.UserInfo, error)

+ IsSuperAdmin func(userId int) (bool, error)

+ SyncOrchestratorToCasbin func() (bool, error)

+ UpdateUser func(userInfo *bean.UserInfo) (*bean.UserInfo, error)

+ type UserServiceImpl struct

+ func NewUserServiceImpl(userAuthRepository repository.UserAuthRepository, ...) *UserServiceImpl

+ func (impl UserServiceImpl) CheckUserRoles(id int32) ([]string, error)

+ func (impl UserServiceImpl) CreateUser(userInfo *bean.UserInfo) ([]*bean.UserInfo, error)

+ func (impl UserServiceImpl) DeleteUser(bean *bean.UserInfo) (bool, error)

+ func (impl UserServiceImpl) GetAll() ([]bean.UserInfo, error)

+ func (impl UserServiceImpl) GetById(id int32) (*bean.UserInfo, error)

+ func (impl UserServiceImpl) GetByIds(ids []int32) ([]bean.UserInfo, error)

+ func (impl UserServiceImpl) GetLoggedInUser(r *http.Request) (int32, error)

+ func (impl UserServiceImpl) GetUserByEmail(emailId string) (*bean.UserInfo, error)

+ func (impl UserServiceImpl) GetUserByToken(token string) (int32, error)

+ func (impl UserServiceImpl) GetUsersByFilter(size int, from int) ([]bean.UserInfo, error)

+ func (impl UserServiceImpl) IsSuperAdmin(userId int) (bool, error)

+ func (impl UserServiceImpl) SyncOrchestratorToCasbin() (bool, error)

+ func (impl UserServiceImpl) UpdateUser(userInfo *bean.UserInfo) (*bean.UserInfo, error)

+ type WebhookToken struct

+ WebhookToken string

+ func GetWebhookToken() (*WebhookToken, error)