CVE-2022-39397

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.6 MEDIUM
PHYSICAL
LOW
HIGH
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
GitHub_MCNA
5.6 MEDIUM
PHYSICAL
LOW
HIGH
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
VendorProductVersion
aliyun-oss-client_projectaliyun-oss-client
𝑥
< 0.8.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29
https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29
https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc