CVE-2022-3540
An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input allows an authenticated attack...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input allows an authenticated attacker to extract other users email addresses
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- web gitlab.com