Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2024/05/24 8:19 p.m.•31 views

github.com/huandu/facebook may expose access_token in error message.

Summary accesstoken can be exposed in error message on fail in HTTP request. Details Using this module, when HTTP request fails, error message can contain accesstoken. This can be happen when: - module is sending HTTP request with query parameter ?accesstoken=.... - and HTTP request fails errors...

3.7CVSS6.5AI score0.00504EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/24 12:00 a.m.•7 views

CVE-2024-35232: Generation of Error Message Containing Sensitive Information

github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. accesstoken can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2...

3.7CVSS5.7AI score0.00504EPSS
SaveExploits0References1
Rows per page
Query Builder