Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40198
HistoryApr 20, 2023 - 4:16 a.m.

Token Disclosure

2023-04-2004:16:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
security
vulnerability
token disclosure
nuxtlabs
github module
hard-coded credentials
config file
attacker
sensitive information

0.003 Low

EPSS

Percentile

67.8%

@nuxtlabs/github-module is vulnerable to Token Disclosure. The vulnerability exists in the module.ts because it uses hard-coded credentials in the config file, which allows an attacker to gain sensitive information through the token in the public runtime config.

0.003 Low

EPSS

Percentile

67.8%

Related for VERACODE:40198