Github.Com Sylabs Scs-Library-Client vulnerabilities

1 known vulnerability affecting github.com/sylabs_scs-library-client.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-23538MEDIUM≥ 1.4.0, < 1.4.2≥ 0, < 1.3.42023-01-20

CVE-2022-23538 [MEDIUM] CWE-522 scs-library-client may leak user credentials to third-party service via HTTP redirect scs-library-client may leak user credentials to third-party service via HTTP redirect ### Impact When the scs-library-client is used to pull a container image, with authentication, the HTTP Authorization header sent by the client to the library service may be incorrectly leaked to an S3 backing storage provider. This occurs in a specific flow, where the library service redirect