Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/21 8:14 p.m.17 views

Fission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger

Summary The Fission router registers an internal-style route — /fission-function/ and /fission-function// — for every Function object, independent of whether any HTTPTrigger exists for that function. The route was mounted on the same listener as user-defined HTTPTriggers svc/router, port 8888, so...

9.8CVSS5.9AI score0.00353EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder