PT-2021-14504 · Vela · Vela

Name of the Vulnerable Software and Affected Versions: Vela versions 0.7.0 through 0.7.4 Description: The issue concerns an authentication mechanism added in version 0.7.0 of Vela, which enables malicious users to obtain secrets by utilizing injected credentials within the /.netrc file. This can ...