Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak
Résumé
Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to fetch the details page for any GitHub / GitLab configuration on a Coolify instance by only knowing the UUID of the model. This exposes the "client id", "client secret" and "webhook secret." Version 4.0.0-beta.361 fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov