Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40724
HistoryMay 30, 2023 - 7:47 a.m.

Information Disclosure

2023-05-3007:47:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
codedx
information disclosure
vulnerability
job configuration form
api keys
attacker

0.0005 Low

EPSS

Percentile

17.5%

Codedx is vulnerable to Information Disclosure. The vulnerability exists because the job configuration form does not mask API keys which allows an attacker to gain access to observe and capture the key information.

CPENameOperatorVersion
code dx pluginle3.1.0
code dx pluginle3.1.0

0.0005 Low

EPSS

Percentile

17.5%