Insertion of Sensitive Information into Log File in delgan/loguru
CVE-2022-0338

4.3MEDIUM

Key Information:

Vendor

Delgan

Status
Delgan/loguru
Vendor
CVE Published:
25 January 2022

What is CVE-2022-0338?

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.

Affected Version(s)

delgan/loguru < 0.5.3

References

https://huntr.dev/bounties/359bea50-2bc6-426a-b2f9-175d40...
x_refsource_CONFIRM
https://github.com/delgan/loguru/commit/ea39375e62f9b8f18...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.