Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qc9g-wj38-hfvp

Опубликовано: 02 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key

EPSS

Процентиль: 5%
0.00161
Низкий

7.5 High

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 7.5
nvd
12 дней назад

Transmission of a sensitive key in the URL over an unencrypted HTTP connection.  The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key

EPSS

Процентиль: 5%
0.00161
Низкий

7.5 High

CVSS3

Дефекты

CWE-319