Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2026/09/02 11:44 p.m.7 views

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Summary The OpenChoreo API server openchoreo-api authorized requests to its exec and wirelogs endpoints against the project supplied by the caller in the request, rather than against the project that actually owns the target component. The target component was resolved by name only, and the...

8.8CVSS6AI score0.00353EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder