Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/02/12 11:8 a.m.35 views

Nextcloud: nextcloud-snap CircleCI project has vulnerable configuration which can lead to exposing secrets

Summary: CircleCI allows projects to configure whether builds will run as a result of a pull request from a fork, and also whether these fork PRs have access to the secrets stored in the parent repo's CircleCI settings. When both settings are enabled, and the repo associated with the project allo...

6.7AI score
SaveExploits0
Rows per page
Query Builder