Lucene search
CVE-2021-21432
Vela Pipeline Automation (CI/CD) framework version 0.7.0 allows malicious user to obtain secret
Show more
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Information Disclosure | 12 Apr 202108:35 | – | veracode |
 | CVE-2021-21432 Reject unauthorized access with GitHub PATs | 9 Apr 202118:10 | – | cvelist |
 | CVE-2021-21432 | 9 Apr 202118:15 | – | osv |
| GO-2022-0812 Reject unauthorized access with GitHub PATs in github.com/go-vela/server | 21 Aug 202415:29 | – | osv |
| Reject unauthorized access with GitHub PATs | 15 Feb 202201:57 | – | osv |
 | CVE-2021-21432 | 9 Apr 202118:15 | – | nvd |
 | Authentication flaw | 9 Apr 202118:15 | – | prion |
 | Reject unauthorized access with GitHub PATs | 15 Feb 202201:57 | – | github |
[
{
"product": "server",
"vendor": "go-vela",
"versions": [
{
"status": "affected",
"version": ">= 0.7.0, < 0.7.5"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo09 Apr 2021 18:15Current
6.5Medium risk
Vulners AI Score6.5
CVSS23.5
CVSS36.5 - 7.5
EPSS0.00098