OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints
Résumé
OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings to clients. Additionally, login token material was exposed in UI/rendered responses and token rotation output. This issue has been patched in version 1.6.3-alpha.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com
- web github.com