Lucene search
CVE-2022-39304
ghinstallation version 1 vulnerability allows exposing bearer JWT token, patched in 2.0.
Show more
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Hardcoded credentials | 20 Dec 202220:15 | – | prion |
 | CVE-2022-39304 ghinstallation returns app JWT in error responses | 20 Dec 202219:52 | – | cvelist |
 | CVE-2022-39304 | 20 Dec 202220:15 | – | nvd |
 | CVE-2022-39304 | 23 Dec 202201:34 | – | redhatcve |
 | CVE-2022-39304 | 20 Dec 202220:15 | – | osv |
| GHSA-H4Q8-96P6-JCGR ghinstallation returns app JWT in error responses | 19 Dec 202222:48 | – | osv |
| GO-2022-1178 JWT leak in github.com/bradleyfalzon/ghinstallation | 22 Dec 202221:01 | – | osv |
 | Information Disclosure | 20 Dec 202205:04 | – | veracode |
 | CVE-2022-39304 ghinstallation returns app JWT in error responses | 20 Dec 202219:52 | – | vulnrichment |
 | ghinstallation returns app JWT in error responses | 19 Dec 202222:48 | – | github |
10
Node
[
{
"vendor": "bradleyfalzon",
"product": "ghinstallation",
"versions": [
{
"version": "< 2.0.0",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo20 Dec 2022 20:15Current
4.9Medium risk
Vulners AI Score4.9
CVSS34.7 - 5
EPSS0.00034
SSVC