2 matches found
github.com/huandu/facebook may expose access_token in error message.
Summary accesstoken can be exposed in error message on fail in HTTP request. Details Using this module, when HTTP request fails, error message can contain accesstoken. This can be happen when: - module is sending HTTP request with query parameter ?accesstoken=.... - and HTTP request fails errors...
3.7CVSS6.5AI score0.00504EPSS
SaveExploits0References7Affected Software1
CVE-2024-35232: Generation of Error Message Containing Sensitive Information
github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...
3.7CVSS5.7AI score0.00504EPSS
SaveExploits0References1
20