Lucene search
+L

1195 matches found

Github Security Blog
Github Security Blog
added 6 days ago9 views

OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output

Summary The synchronous execution RPCs StartActionAndWait and StartActionByGetAndWait return the full LogEntry for the just-executed action without checking whether the caller is allowed to read that action's logs. OliveTin's ACL model separates exec from logs. A deployment can intentionally allo...

4.3CVSS6.2AI score0.00252EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder