← Voltar para CVEs
CVE-2022-31162
HIGH7.5
Descricao
Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive information in application logs. As a workaround, do not print/output requests and responses for OAuth and client configurations in logs.
Detalhes CVE
Pontuacao CVSS v3.17.5
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado7/22/2022
Ultima modificacao11/21/2024
Fontenvd
Avistamentos honeypot0
Produtos afetados
slack_morphism_project:slack_morphism
Fraquezas (CWE)
CWE-200CWE-1258CWE-212
Referencias
https://github.com/abdolence/slack-morphism-rust/releases/tag/v0.41.0(security-advisories@github.com)
https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-99j7-mhfh-w84p(security-advisories@github.com)
https://github.com/abdolence/slack-morphism-rust/releases/tag/v0.41.0(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-99j7-mhfh-w84p(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.