Lucene search
+L

1 matches found

OSV
OSV
added 2024/03/29 7:5 p.m.102 views

GHSA-X768-CVR2-345R Un-sanitized metric name or labels can be used to take over exported metrics

Impact In code which applies un-sanitized string values into metric names or labels, like this: swift let lang = try? request.query-getString.self, at: "lang" Counter label: "language", dimensions: "lang", lang ?? "unknown" an attacker could make use of this and send a ?lang query parameter...

5.9CVSS5.5AI score0.00645EPSS
SaveExploits1References4
Rows per page
Query Builder