Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-39292

Date: October 9, 2022

Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitive URLs for Slack webhooks that contain private information. The problem is fixed in version 1.3.2 which redacts sensitive URLs for webhooks. As a workaround, people who use Slack webhooks may disable or filter debug logs.

Language: RUST

Severity Score

Related Resources (9)

https://github.com/abdolence/slack-morphism-rust
https://github.com/abdolence/slack-morphism-rust/commit/65ef9fac4f39c4e171e2952a6cf029bb0d059a89
https://github.com/abdolence/slack-morphism-rust/security/advisories/GHSA-4mjx-2gh5-ph8h
https://nvd.nist.gov/vuln/detail/CVE-2022-39292
https://rustsec.org/advisories/RUSTSEC-2022-0087.html
https://github.com/abdolence/slack-morphism-rust/releases/tag/v1.3.2
https://github.com/abdolence/slack-morphism-rust/commit/48a1da2dc2ad3a5ccc60036d43f6f8fbb2c15f1d
https://crates.io/crates/slack-morphism
https://www.mend.io/vulnerability-database/CVE-2022-39292

Severity Score

Weakness Type (CWE)

Exposure of Sensitive System Information Due to Uncleared Debug Information

CWE-1258

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us