VULNERABILITY INTELLIGENCE

CVE-2022-39397

CVSS score5.6 MEDIUM

EPSS probability0.47%

CISA KEVNot currently listed

Published2022-11-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

Description

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

security-advisories@github.com — Patch, Third Party Advisory
security-advisories@github.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory