1 matches found
CVE-2025-15617: Insufficiently Protected Credentials
Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUBTOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commits...
8.3CVSS5.9AI score0.00387EPSS
SaveExploits2References1
20