Vulnerability RUSTSEC-2022-0087
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 years ago
October 10, 2022 at 12:00 PM UTC
Slack Webhooks secrets leak in debug logs
0.1.0 - 1.3.1
0.1.0 - 1.3.1
Summary
Slack Webhooks secrets leak in debug logs
Details
Debug log formatting made it possible to leak Webhooks secrets into debug logs.
The patched version has introduced more strict checks to avoid this.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 hours ago
Slack Morphism verifier errors disclose valid HMACs in the logs
1.0.0 - 2.27.0 GHSA-26w4-8w32-4x3v
1.0.0 - 2.27.0 GHSA-26w4-8w32-4x3v
High Risk
4 years ago
Exposure of sensitive Slack webhook URLs in debug logs and traces
0.1.0 - 1.3.1 GHSA-4mjx-2gh5-ph8h
0.1.0 - 1.3.1 GHSA-4mjx-2gh5-ph8h
High Risk
4 years ago
Slack OAuth Secrets leak in debug logs
0.1.0 - 0.40.0 RUSTSEC-2022-0086
0.1.0 - 0.40.0 RUSTSEC-2022-0086
High Risk
4 years ago
Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs
0.1.0 - 0.40.0 GHSA-99j7-mhfh-w84p
0.1.0 - 0.40.0 GHSA-99j7-mhfh-w84p
Impacted packages
Timeline
Published
4 years ago
October 10, 2022 at 12:00 PM UTC
Fixed (1.3.2)
4 years ago
October 08, 2022 at 12:58 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:10 AM UTC