Beveiligingsadvies

CVE-2023-24828

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-02-07 23:25:11

Laatst bijgewerkt 2025-03-10 21:15:15

Toegewezen door GitHub_M

CVSS-score 8.1

Status PUBLISHED

Beschrijving

Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing normal users (or everyone if it allows self-registration) may exploit this to elevate privilege to obtain administrator permission. This issue is has been addressed in version 7.9.12. Users are advised to upgrade. There are no known workarounds for this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗