13 matches found
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
EUVD-2025-199923
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2025-66432
In Oxide Control Plane versions 15–17 before 17.1, API tokens can be renewed past their expiration date. This is the core issue; no exploitation details are provided in the documents. The remediation/patch version is not explicitly stated in the supplied materials.
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
Oxide Control Plane 安全漏洞
Oxide Control Plane is an open source console software from Oxide Computer Company. A security vulnerability exists in Oxide Control Plane versions 15 through 17 and prior to 17.1, which stems from the possibility that API tokens may continue to be used after expiration...
PT-2025-48383
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2024-55582
CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...
CVE-2023-50913
Oxide control plane software before 5 allows SSRF...
CVE-2023-50913
Oxide control plane software versions prior to 5 are vulnerable to Server-Side Request Forgery (SSRF) . This vulnerability allows an attacker to trick the server into making requests to internal or external systems, potentially leading to unauthorized access to sensitive data or systems. To resol...