CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

MAL-2025-2283 Malicious code in upload-aliyun-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b137056ce2896ba2e4b0b632262308afc40672c5a46bff9c2cb50a7b3a81a386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upload-aliyun-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b137056ce2896ba2e4b0b632262308afc40672c5a46bff9c2cb50a7b3a81a386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-23420 · Alibaba · Oss Aliyun

Name of the Vulnerable Software and Affected Versions: OSS Aliyun versions 1.4.10 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting maliciou...

cn.dev33:sa-token-solon-plugin (>=1.20.0, <=1.24.0), com.ibeetl:sql-solon-plugin (>=3.4.3-release, <=3.6.3-release) +112 more potentially affected by CVE-2023-48967 via org.noear:solon (1.5.1)

org.noear:solon MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - cn.dev33:sa-token-solon-plugin =1.20.0, =3.4.3-release, =3.6.3-release - org.noear:activerecord-solon-plugin 1.5.1 -...

cn.dev33:sa-token-solon-plugin (1.27.0), com.ibeetl:sql-solon-plugin (3.11.1-release) +121 more potentially affected by CVE-2023-48967 via org.noear:solon (1.5.40)

org.noear:solon MAVEN version 1.5.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - cn.dev33:sa-token-solon-plugin 1.27.0 - com.ibeetl:sql-solon-plugin 3.11.1-release - org.noear:activerecord-solon-plugin 1.5.40 ...

org.noear:activerecord-solon-plugin (1.10.5-m3), org.noear:aliyun-oss-solon-cloud-plugin (1.10.5-m3) +177 more potentially affected by CVE-2023-48967 via org.noear:solon (1.10.5-m3)

org.noear:solon MAVEN version 1.10.5-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:activerecord-solon-plugin 1.10.5-m3 - org.noear:aliyun-oss-solon-cloud-plugin 1.10.5-m3 -...

org.noear:activemq-solon-cloud-plugin (1.12.2-m1), org.noear:activerecord-solon-plugin (1.12.2-m1) +174 more potentially affected by CVE-2023-48967 via org.noear:solon (1.12.2-m1)

org.noear:solon MAVEN version 1.12.2-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:activemq-solon-cloud-plugin 1.12.2-m1 - org.noear:activerecord-solon-plugin 1.12.2-m1 -...

org.noear:aliyun-oss-solon-plugin (1.3.36), org.noear:aws-s3-solon-plugin (1.3.36) +98 more potentially affected by CVE-2023-48967 via org.noear:solon (1.3.36)

org.noear:solon MAVEN version 1.3.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:aliyun-oss-solon-plugin 1.3.36 - org.noear:aws-s3-solon-plugin 1.3.36 - org.noear:beetlsql-solon-plugin 1.3.36 -...

org.noear:activerecord-solon-plugin (1.5.36), org.noear:aliyun-oss-solon-plugin (1.5.36) +119 more potentially affected by CVE-2023-35839 via org.noear:solon (1.5.36)

org.noear:solon MAVEN version 1.5.36 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:activerecord-solon-plugin 1.5.36 - org.noear:aliyun-oss-solon-plugin 1.5.36 - org.noear:aws-s3-solon-plugin 1.5.36 -...

org.noear:activerecord-solon-plugin (1.11.5), org.noear:aliyun-ons-solon-cloud-plugin (1.11.5) +203 more potentially affected by CVE-2023-35839 via org.noear:solon (1.11.5)

org.noear:solon MAVEN version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:activerecord-solon-plugin 1.11.5 - org.noear:aliyun-ons-solon-cloud-plugin 1.11.5 -...

org.noear:activerecord-solon-plugin (1.11.7-m2), org.noear:aliyun-ons-solon-cloud-plugin (1.11.7-m2) +171 more potentially affected by CVE-2023-35839 via org.noear:solon (1.11.7-m2)

org.noear:solon MAVEN version 1.11.7-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.noear:solon and may be impacted: - org.noear:activerecord-solon-plugin 1.11.7-m2 - org.noear:aliyun-ons-solon-cloud-plugin 1.11.7-m2 -...

CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

Code injection

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397 Exposure of sensitive information in aliyun-oss-client

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

CVE-2022-39397: Exposure of Sensitive Information to an Unauthorized Actor

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1...

`aliyun-oss-client` secret exposure

The aliyun-oss-client unintentionally divulges the authentication secret. This bug was fixed in this commit by limiting the concerned traits to be pub only within the crate...

Hobo AliCloud OSS credentials suffer from information leakage vulnerability

Lotus app is an investment and financial management software. There is an information leakage vulnerability in the Lotus Aliyun OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret built into the mobile app. An attacker can...