3 matches found
GHSA-4FJG-2H4Q-FWG3 GitHub CLI allows path traversal through unescaped request URL components
Summary A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components. A value containing URL path metacharacters can alter the request path and cause gh to addre...
PT-2020-7449
Name of the Vulnerable Software and Affected Versions: Unspecified web applications affected versions not specified Description: The issue allows man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP...
CVE-2002-0387: Undefined Security Weakness
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL...