Lucene search
+L

1 matches found

OSV
OSV
added 2024/01/04 10:2 a.m.14 views

CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend

A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...

5.7CVSS6.6AI score0.00561EPSS
SaveExploits0References6
Rows per page
Query Builder