showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

GHSA ID

GHSA-5mj6-3cmq-fh34

CVE ID

CVE-2022-0079

Severity

medium

Published

2022-01-06T22:22:46Z

Updated

2023-02-03T05:04:10Z

CVSS

5.3 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v3

5.3 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

CWEs

• CWE-209 · Generation of Error Message Containing Sensitive Information

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0079 ↗
• https://github.com/star7th/showdoc/commit/e43df0a190f68aefa272507d3bd54475f566c1db ↗
• https://huntr.dev/bounties/b37f0e26-355a-4d50-8495-a567c10828ee ↗
• https://github.com/advisories/GHSA-5mj6-3cmq-fh34 ↗