Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rwhh-hf6m-2cp8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).

EPSS

Процентиль: 72%
0.00737
Низкий

Связанные уязвимости

CVSS3: 7.5
nvd
около 6 лет назад

WP SlackSync plugin through 1.8.5 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).

EPSS

Процентиль: 72%
0.00737
Низкий