CVE-2022-39397 — Exposure of sensitive information in aliyun-oss-client

CVE-2022-39397

Exposure of sensitive information in aliyun-oss-client PUBLISHED

Description (CNA)

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

Affected (CNA)

Vendor / product	Versions
tu6ge / oss-rs	affected < 0.8.1

CWE

CWE-200

References

https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29

ADP enrichment

CVE

No English description supplied.

https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc
https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29

CISA-ADP

No English description supplied.

No references supplied.