地图 / Invite tokens have Insufficient entropy in GHES Management Console

Invite tokens have Insufficient entropy in GHES Management Console

密码学缺陷 / Use of Insufficiently Random Values / #2197801

厂商: GitHub
严重程度: 低危
赏金: —
弱点: Use of Insufficiently Random Values
研究员: @imrerad
披露日期: 2024-01-12
资产: GitHub Enterprise Server
CVE: CVE-2023-46648

该报告还没有中文解读。

时间线

2023-10-08报告提交
2024-01-12公开披露

阅读 HackerOne 原文 ↗作者 @imrerad · 版权归作者与 GitHub 所有

同类报告

on the implications of permitting procedural cullingcurl · 2025-07-22 Predictable proposal participant tokens enable unauthorized access and vote submissionNextcloud · 2026-01-04 · $100 Usage of unsafe random function in undici for choosing boundaryNode.js · 2025-01-23 The initial E2EE password generated by Rocket.Chat mobile can be recovered in a practical timescale.Rocket.Chat · 2024-10-01

Invite tokens have Insufficient entropy in GHES Management Console · 破甲 POJIA