Lucene search
+L

27 matches found

NVD
NVD
•added 2021/12/13 8:15 p.m.•46 views

CVE-2021-43823

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searches and Code Monitoring features. A...

6.5CVSS0.00865EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/13 8:15 p.m.•21 views

Code injection

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searches and Code Monitoring features. A...

4CVSS6.4AI score0.00865EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/13 7:55 p.m.•71 views

CVE-2021-43823 Side-channel attack in Sourcegraph

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searches and Code Monitoring features. A...

6.5CVSS6.7AI score0.00865EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/13 7:55 p.m.•1 views

CVE-2021-43823

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searches and Code Monitoring features. A...

7.1CVSS0.00865EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/13 12:00 a.m.•3 views

PT-2021-23958

Name of the Vulnerable Software and Affected Versions: Sourcegraph versions prior to 3.33.2 Description: The issue allows an authenticated but unauthorized actor to guess strings in private source code through a side-channel attack. This affects the Saved Searches and Code Monitoring features. A...

6.5CVSS0.00865EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/12/13 12:00 a.m.•13 views

Sourcegraph 信息泄露漏洞

Sourcegraph is an open source code search and navigation tool from US-based Sourcegraph. An information disclosure vulnerability exists in Sourcegraph versions prior to 3.33.2. The vulnerability stems from the fact that Sourcegraph prior to version 3.33.2 is susceptible to a side-channel attack,...

6.5CVSS6.5AI score0.00865EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•7 views

CVE-2021-43823: Exposure of Sensitive Information to an Unauthorized Actor

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searches and Code Monitoring features. A...

6.5CVSS6.6AI score0.00865EPSS
SaveExploits0References3
Rows per page
Query Builder