Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.37 views

Local API Login Credentials Disclosure in paratrooper-pingdom

The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process. Vulnerable Code: From: paratrooper-pingdom-1.0.0/lib/paratrooper-pingdom.rb ruby def setupoptions = %xcurl https://api.pingdom.com/api/2.0/checks -X PUT ...

2.1CVSS6.1AI score0.0041EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder