Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
added 2022/12/28 7:0 a.m.7 views

CVE-2022-46179 LiuOS vulnerable to Authorization Bypass through User-Controlled Key

LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUBACTIONS environment variable to anything other than null or true and skip authentication checks. This issue is patched in the latest...

9.2CVSS9.3AI score0.00331EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/12/28 12:0 a.m.10 views

LiuOS 安全漏洞

LiuOS is a small Python project designed to mimic the functionality of a regular operating system. A security vulnerability exists in versions of LiuOS prior to 0.1.1, which stems from a vulnerability that allows an attacker to set the GITHUBACTIONS environment variable to any value other than nu...

9.2CVSS7.4AI score0.00331EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/12/28 12:0 a.m.10 views

PT-2022-27790 · Liuos · Liuos

Name of the Vulnerable Software and Affected Versions: LiuOS versions 0.1.0 and prior Description: LiuOS is a small Python project that imitates the functions of a regular operating system. The issue allows an attacker to set the GITHUB ACTIONS environment variable to anything other than null or...

9.2CVSS7.6AI score0.00331EPSS
SaveExploits1References5
Rows per page
Query Builder