13 matches found
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
EUVD-2025-199923
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
Oxide Control Plane 安全漏洞
Oxide Control Plane is an open source console software from Oxide Computer Company. A security vulnerability exists in Oxide Control Plane versions 15 through 17 and prior to 17.1, which stems from the possibility that API tokens may continue to be used after expiration...
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2025-66432
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2025-66432
In Oxide Control Plane versions 15–17 before 17.1, API tokens can be renewed past their expiration date. This is the core issue; no exploitation details are provided in the documents. The remediation/patch version is not explicitly stated in the supplied materials.
PT-2025-48383
In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date...
CVE-2024-55582
CVE-2024-55582 affects Oxide prior to version 6, where the control plane datastores are unencrypted. Root cause: storage of control plane data without encryption. Impact (per sources): potential exposure or modification of sensitive control-plane information, reflected in the CVSS vector (high co...
CVE-2023-50913
Oxide control plane software before 5 allows SSRF...
CVE-2023-50913
The CVE-2023-50913 entry refers to the Oxide control plane software prior to version 5, where a Server-Side Request Forgery (SSRF) vulnerability is present. The issue affects the Oxide control plane software and is characterized by SSRF with high impact to confidentiality and integrity (per CVSS ...
CVE-2023-50913
Oxide control plane software before 5 allows SSRF...
CVE-2023-50913
Oxide control plane software before 5 allows SSRF...