Lucene search
Veracode Vulnerability DatabaseVERACODE:33302HistoryDec 14, 2021 - 4:34 a.m.
Side-Channel Attack
2021-12-1404:34:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
27.0%
github.com/sourcegraph/sourcegraph is vulnerable to side channel attack. The attack is possible because the library does not properly exclude the private source code search results in ‘search_results.go’ , allowing an authenticated attacker to check specific string and API keys exists in private source code by using saved searches or code monitors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/sourcegraph/sourcegraph | le | v3.33.1 | |
| github.com/sourcegraph/sourcegraph | le | v3.33.1 |
Related
cve
cve
CVE-2021-43823
2021-12-13 20:15:07
CVE-2022-23643
2022-02-15 22:15:07
osv
osv
CVE-2021-43823
2021-12-13 20:15:07
CVE-2022-23643
2022-02-15 22:15:07
nvd
nvd
CVE-2021-43823
2021-12-13 20:15:07
CVE-2022-23643
2022-02-15 22:15:07
prion
prion
Code injection
2021-12-13 20:15:00
Code injection
2022-02-15 22:15:00
cvelist
cvelist
CVE-2021-43823 Side-channel attack in Sourcegraph
2021-12-13 19:55:10
CVE-2022-23643 Side-channel attack in Sourcegraph Code Monitors
2022-02-15 21:25:10