Lucene search
+L

2 matches found

OSV
OSV
added 2022/02/15 12:19 a.m.21 views

GHSA-GV2H-GF8M-R68J Exposure of server configuration in github.com/go-vela/server

Impact What kind of vulnerability is it? Who is impacted? The ability to expose configuration set in the Vela server via pipeline template functionality. It impacts all users of Vela. Sample of template exposing server configuration using Sprig's env function: yaml metadata: template: true steps:...

7.4CVSS6.1AI score0.01777EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/02/15 12:19 a.m.52 views

Exposure of server configuration in github.com/go-vela/server

Impact What kind of vulnerability is it? Who is impacted? The ability to expose configuration set in the Vela server via pipeline template functionality. It impacts all users of Vela. Sample of template exposing server configuration using Sprig's env function: yaml metadata: template: true steps:...

7.4CVSS5.4AI score0.01777EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder