Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/08/27 6:40 p.m.26 views

Chisel's AUTH environment variable not respected in server entrypoint

Summary The Chisel server doesn't ever read the documented AUTH environment variable used to set credentials, which allows any unauthenticated user to connect, even if credentials were set. This advisory is a formalization of a report sent to the maintainer via email. Details In the help page for...

8.6CVSS8.4AI score0.0045EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder