Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/04/15 7:15 p.m.39 views

CVE-2025-41118 Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection

Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage COS. If the database is configured to use Tencent COS as the storage backend, an attacker could extract the secretkey configuration value from the...

9.1CVSS0.00407EPSS
SaveExploits0References1
Rows per page
Query Builder