CVE-2022-39397

medium

Description

aliyun-oss-client is a rust client for Alibaba Cloud OSS. Users of this library will be affected, the incoming secret will be disclosed unintentionally. This issue has been patched in version 0.8.1.

References

Advisories

https://github.com/tu6ge/oss-rs/security/advisories/GHSA-3w3h-7xgx-grwc

https://github.com/tu6ge/oss-rs/commit/e4553f7d74fce682d802f8fb073943387796df29

Details

Source: Mitre, NVD

Published: 2022-11-22

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N