{"id":"EUVD-2022-7215","enisaUuid":"1d2c1160-541c-393f-b628-7355b2a5a132","description":"aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.","datePublished":"Nov 22, 2022, 12:00:00 AM","dateUpdated":"Apr 23, 2025, 4:36:30 PM","baseScore":5.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N","references":"https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc\nhttps://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29\n","aliases":"CVE-2022-39397\nGHSA-3w3h-7xgx-grwc\n","assigner":"GitHub_M","epss":0.47,"enisaIdProduct":[{"id":"56ff9183-6368-3e7f-80a7-abdfe07bfa74","product":{"name":"oss-rs","vendor":{"name":"tu6ge"}},"product_version":"\u003c 0.8.1"}],"enisaIdVendor":[{"id":"3d8b1fda-d66e-32d1-bc46-4c6feece40ae","vendor":{"name":"tu6ge"}}],"enisaIdVulnerability":[{"id":"d337537f-dfe1-3144-81a6-3b0ff40a87c0","vulnerability":{"id":"CVE-2022-39397","description":"aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.","datePublished":"Nov 22, 2022, 12:00:00 AM","dateUpdated":"Apr 23, 2025, 4:36:30 PM","status":"PUBLISHED","baseScore":5.6,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N","references":"https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc\nhttps://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29\n","enisa_id":"EUVD-2022-7215\n","assigner":"GitHub_M","epss":0.47,"dataProcessed":"Oct 30, 2026, 7:14:51 AM","vulnerabilityProduct":[{"id":"a7ee99ca-1651-3abc-875f-ab4d0f7773a4","product":{"name":"oss-rs","vendor":{"name":"tu6ge"}},"product_version":"\u003c 0.8.1"},{"id":"bac29453-9c71-41e0-90dc-a8855c51e9fc","product":{"name":"oss-rs","vendor":{"name":"tu6ge"}},"product_version":"\u003c 0.8.1"}],"vulnerabilityVendor":[{"id":"fb04ba48-ac3d-34f6-9e0c-4fb9b509299e","vendor":{"name":"tu6ge"}}]}},{"id":"ead9f9f7-b00a-3300-a128-7fa2c2e8724c","vulnerability":{"id":"GHSA-3w3h-7xgx-grwc","description":"Leak in Aliyun  KeySecret ","datePublished":"Nov 21, 2022, 8:39:05 PM","dateUpdated":"Feb 8, 2023, 4:18:19 PM","baseScore":null,"references":"https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-39397\nhttps://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29\nhttps://github.com/tu6ge/oss-rs\nhttps://rustsec.org/advisories/RUSTSEC-2022-0089.html\n","enisa_id":"EUVD-2022-7215\n","aliases":"CVE-2022-39397\nGHSA-3w3h-7xgx-grwc\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:05:53 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}