Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87362
HistoryOct 12, 2022 - 12:00 a.m.

Slack Morphism Information Disclosure Vulnerability

2022-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
slack morphism
rust
web api
events api
block kit
information disclosure

EPSS

0.001

Percentile

48.7%

Slack Morphism is a modern asynchronous client library for Rust that supports Slack Web, Events APIocket Mode, and Block Kit. versions prior to Slack Morphism 1.3.2 have an information disclosure vulnerability that stems from insufficient protection of sensitive information in the application, which could be exploited to obtain sensitive URLs containing private information via debug logs.

EPSS

0.001

Percentile

48.7%