Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/01/20 10:38 p.m.40 views

scs-library-client may leak user credentials to third-party service via HTTP redirect

Impact When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirects the...

7.6CVSS1.8AI score0.00709EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder