GitHub Advisoryadvisory · crates.io

GHSA-3w3h-7xgx-grwc Leak in Aliyun KeySecret

MEDIUM Published 2022-11-21 Modified 2023-02-08 Official page ↗
Aliases
CVE-2022-39397
Ecosystem
crates.io
Packages
aliyun-oss-client
Severity
Moderate
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
Weaknesses
CWE-200
Reviewed
2022-11-21

Affected packages

• crates.io aliyun-oss-client: < 0.8.1 → fixed in 0.8.1

Description

Impact Users of this library will be affected when using this library, the incoming secret will be disclosed unintentionally. Patches This have already been solved. Workarounds No, It cannot be patched without upgrading References No For more information If you have any questions or comments about this advisory: • Email us at email address

Related

Alias · CVE (1)

  • CVE-2022-39397 aliyun-oss-client is a rust client for Alibaba Cloud OSS. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References