cve/2023/CVE-2023-2138.md

18 lines
647 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-2138](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2138)
![](https://img.shields.io/static/v1?label=Product&message=nuxtlabs%2Fgithub-module&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%201.6.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-798%20Use%20of%20Hard-coded%20Credentials&color=brighgreen)
### Description
Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2.
### POC
#### Reference
- https://huntr.dev/bounties/65096ef9-eafc-49da-b49a-5b88c0203ca6
#### Github
No PoCs found on GitHub currently.