Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/01/24 4:33 p.m.40 views

CVE-2025-22610 Coolify Vulnerable to OAuth Secrets Leak

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to fetch the global coolify instance OAuth configuration. This exposes the "client id" and "client secret" f...

7.1CVSS0.00383EPSS
SaveExploits1References1
Rows per page
Query Builder