Lucene search

CVE-2020-26294

🗓️ 04 Jan 2021 19:15:15Reported by GitHub_MType

Vela compiler before 0.6.1 allows exposure of server configuration. Impact: All users of Vela

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Prion	Code injection	4 Jan 202119:15	–	prion
OSV	CVE-2020-26294	4 Jan 202119:15	–	osv
OSV	Exposure of server configuration in github.com/go-vela/server	15 Feb 202200:19	–	osv
OSV	GO-2022-0838 Exposure of server configuration in github.com/go-vela/server in github.com/go-vela/compiler	21 Aug 202415:29	–	osv
NVD	CVE-2020-26294	4 Jan 202119:15	–	nvd
Github Security Blog	Exposure of server configuration in github.com/go-vela/server	15 Feb 202200:19	–	github
Cvelist	CVE-2020-26294 Exposure of server configuration	4 Jan 202118:35	–	cvelist
RedhatCVE	CVE-2020-26294	5 Feb 202513:38	–	redhatcve
Veracode	Information Disclosure	5 Jan 202107:02	–	veracode

Nvd

Vulners

Node

target compilerRange<0.6.1

[
  {
    "product": "compiler",
    "vendor": "go-vela",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.6.1"
      }
    ]
  }
]

Source	Link
pkg	www.pkg.go.dev/github.com/go-vela/compiler/compiler
github	www.github.com/go-vela/compiler/security/advisories/GHSA-gv2h-gf8m-r68j
github	www.github.com/go-vela/compiler/commit/f1ace5f8a05c95c4d02264556e38a959ee2d9bda

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Jan 2021 19:15Current

5.4Medium risk

Vulners AI Score5.4

CVSS25

CVSS35.3 - 7.4

EPSS0.0035

CWE-78