Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 8:55 p.m.59 views

Server-Side Request Forgery in charm

We've discovered a vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched in https://github.com/charmbracelet/charm/commit/3c90668f955c7ce5ef721e4fc9faee7053232fd3 and is available in...

9.8CVSS8.8AI score0.00767EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder