CVE-2022-39397

Summary

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

Affected Software

Weaknesses

• CWE-200: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
• https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
• https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29

• ←Previous
• Next→