POJIA破甲
地图 / Health check errors silently dropped when channel buffer full

Health check errors silently dropped when channel buffer full

其他弱点 / Unlabeled / #3620761

厂商
AWS VDP
严重程度
低危
赏金
—
弱点
Unlabeled
研究员
@misop00p
披露日期
2026-04-07
资产
https://github.com/kubernetes-sigs/aws-encryption-provider
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(2117 字符中的一小部分)
**Component:** pkg/plugin/plugin.go:153-156, pkg/plugin/plugin_v2.go:156-158 **Affected Version:** aws-encryption-provider @ 4341c70 (all versions) **Found by:** Source audit **TLP:** TLP:Amber
原文中的代码
// pkg/plugin/plugin.go:152-156 (also plugin_v2.go:155-159)
if err != nil {
    select {
    case p.healthCheck.healthCheckErrc <- err:
    default:
        // ERROR SILENTLY DROPPED
    }

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 AWS VDP 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @misop00p · 版权归作者与 AWS VDP 所有

同类报告

June 2022 Incident ReportHackerOne · 2022-07-01HTML-injection in PDF-export leads to LFIVisma Public · — · $500DOM XSS on duckduckgo.com searchDuckDuckGo · 2020-06-14An attacker can archive and unarchive any structured scope object on HackerOneHackerOne · 2022-04-18Java (Maven): Actually fix the use of insecure protocol to download/upload artifactsGitHub Security Lab · — · $4,000Handling of `tracking` command allows making arbitrary blind requests with user's cookies from Grammarly Extension's originSuperhuman (formerly Grammarly) · 2019-08-01