Lucene search
+L

11283 matches found

Github Security Blog
Github Security Blog
added 2023/09/05 12:30 p.m.37 views

Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.6AI score0.00288EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/09/05 12:30 p.m.24 views

GHSA-QVH6-3J7X-3HQ7 Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS5.6AI score0.00288EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2023/09/05 11:15 a.m.87 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0
NVD
NVD
added 2023/09/05 11:15 a.m.21 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.7AI score0.00288EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/09/05 11:15 a.m.31 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/05 11:15 a.m.32 views

Design/Logic Flaw

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

3.5CVSS7.5AI score0.00288EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2023/09/05 11:15 a.m.12 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7AI score0.00288EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/09/05 11:15 a.m.24 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.2AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/05 11:15 a.m.8 views

UBUNTU-CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.8AI score0.00288EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/05 10:59 a.m.386 views

CVE-2023-20898

CVE-2023-20898 affects SaltStack Salt masters prior to 3005.2 or 3006.2. The issue arises when Git Providers with different environments read from the same cache directory base name, allowing garbage or incorrect data to be read, which can lead to data disclosure, wrongful executions, data corrup...

7.8CVSS5.7AI score0.00288EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/05 10:59 a.m.20 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS6.8AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/05 10:59 a.m.30 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS5.6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/09/05 10:59 a.m.50 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS7.8AI score0.00288EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2023/09/05 10:59 a.m.84 views

CVE-2023-20898

Removed by vendor...

7.8CVSS7.6AI score0.00288EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/09/05 12:00 a.m.20 views

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-2683)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.51883EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/09/05 12:00 a.m.24 views

SaltStack Salt Security Vulnerabilities

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to 3005.2 or 3006.2, which stems from the Git provider progra...

7.8CVSS6.6AI score0.00288EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/09/05 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-2641)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.5AI score0.51883EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2023/09/03 11:30 a.m.53 views

Associated-Threat-Analyzer - Detects Malicious IPv4 Addresses And Domain Names Associated With Your Web Application Using Local Malicious Domain And IPv4 Lists

Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists. Installation From Git git clone https://github.com/OsmanKandemir/associated-threat-analyzer.git cd associated-threat-analyzer && pip3...

7.1AI score
SaveExploits0References6
NVD
NVD
added 2023/09/01 10:15 a.m.38 views

CVE-2023-4704

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS6.1AI score0.00739EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/09/01 9:55 a.m.45 views

CVE-2023-4704 External Control of System or Configuration Setting in instantsoft/icms2

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

8.8CVSS5.4AI score0.00739EPSS
SaveExploits1References2
Rows per page
Query Builder