1195 matches found
OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output
Summary The synchronous execution RPCs StartActionAndWait and StartActionByGetAndWait return the full LogEntry for the just-executed action without checking whether the caller is allowed to read that action's logs. OliveTin's ACL model separates exec from logs. A deployment can intentionally allo...
4.3CVSS6.2AI score0.00252EPSS
SaveExploits0References5Affected Software1
20