Fefes Blog

Wer schöne Verschwörungslinks für mich hat: ab an felix-bloginput (at) fefe.de!

Fragen? Antworten! Siehe auch: Alternativlos

Fri Jan 12 2024

Title Severity
Account Takeover via password reset without user interactions Critical
Attacker can abuse Slack/Mattermost integrations to execute slash commands as another user Critical
Bypass CODEOWNERS approval removal High
Workspaces able to be created under different root namespace Medium
Commit signature validation ignores headers after signature Low

Title	Severity
Account Takeover via password reset without user interactions	Critical
Attacker can abuse Slack/Mattermost integrations to execute slash commands as another user	Critical
Bypass CODEOWNERS approval removal	High
Workspaces able to be created under different root namespace	Medium
Commit signature validation ignores headers after signature	Low

ganzer Monat

Proudly made without AI, Blockchain, PHP, Java, Perl, MySQL and Postgres
Impressum, Datenschutz