Vulnerability RUSTSEC-2022-0086
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 years ago
July 22, 2022 at 12:00 PM UTC
Slack OAuth Secrets leak in debug logs
0.1.0 - 0.40.0
0.1.0 - 0.40.0
Summary
Slack OAuth Secrets leak in debug logs
Details
Debug log formatting made it possible to leak OAuth secrets into debug logs.
The patched version has introduced more strict checks to avoid this.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 hours ago
Slack Morphism verifier errors disclose valid HMACs in the logs
1.0.0 - 2.27.0 GHSA-26w4-8w32-4x3v
1.0.0 - 2.27.0 GHSA-26w4-8w32-4x3v
High Risk
4 years ago
Exposure of sensitive Slack webhook URLs in debug logs and traces
0.1.0 - 1.3.1 GHSA-4mjx-2gh5-ph8h
0.1.0 - 1.3.1 GHSA-4mjx-2gh5-ph8h
Unknown
4 years ago
Slack Webhooks secrets leak in debug logs
0.1.0 - 1.3.1 RUSTSEC-2022-0087
0.1.0 - 1.3.1 RUSTSEC-2022-0087
High Risk
4 years ago
Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs
0.1.0 - 0.40.0 GHSA-99j7-mhfh-w84p
0.1.0 - 0.40.0 GHSA-99j7-mhfh-w84p
Impacted packages
Timeline
Published
4 years ago
July 22, 2022 at 12:00 PM UTC
Fixed (0.41.0)
4 years ago
July 16, 2022 at 11:20 AM UTC
Last Modified
2 years ago
November 08, 2023 at 04:09 AM UTC