Описание
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.2.7 (исключая)
cpe:2.3:a:gistpad_project:gistpad:*:*:*:*:*:visual_studio:*:*
EPSS
Процентиль: 43%
0.00206
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
github
больше 3 лет назад
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.
EPSS
Процентиль: 43%
0.00206
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-863