aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.
References
| Link | Resource |
|---|---|
| https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29 | Patch Third Party Advisory |
| https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc | Third Party Advisory |
| https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29 | Patch Third Party Advisory |
| https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.6 |
| References | () https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29 - Patch, Third Party Advisory | |
| References | () https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc - Third Party Advisory |
11 Jul 2023, 20:41
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other |
28 Nov 2022, 14:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:aliyun-oss-client_project:aliyun-oss-client:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| References | (CONFIRM) https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc - Third Party Advisory | |
| References | (MISC) https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29 - Patch, Third Party Advisory |
22 Nov 2022, 21:56
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-22 21:15
Updated : 2024-11-21 07:18
NVD link : CVE-2022-39397
Mitre link : CVE-2022-39397
CVE.ORG link : CVE-2022-39397
JSON object : View
Products Affected
aliyun-oss-client_project
- aliyun-oss-client
CWE