Beveiligingsadvies

CVE-2026-82282

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 16:19:01

Laatst bijgewerkt 2026-08-31 18:54:51

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Atlantis through 0.47.1 fails to authenticate the /github-app/setup endpoint, allowing unauthenticated attackers to access GitHub App credentials. Attackers can observe or intercept the GitHub redirect during setup to obtain the RSA private key and webhook secret, enabling installation token minting and webhook payload forgery.

← Alle CVE's bekijken Bekijk op cve.org ↗