CWE-527: Exposure of Version-Control Repository to an Unauthorized Control Sphere
The product stores a CVS, git, or other source-control repository in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.
A kind of CWE-552 Files or Directories Accessible to External Parties.
From the CWE List. © The MITRE Corporation.
Newest
- getgrav grav Grav before 2.1.7 Information Disclosure via Nested .git Directories 8.7 High
- manacle technologies multi-tenant erp system Information Disclosure Vulnerability in Manacle Technologies ERP System 9.2 Critical
-
m00nl1ght-dev/steam-workshop-deployGitHub Actions,BoldestDungeon/steam-workshop-deployGitHub Actions +1 more m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials 10.0 Critical - cisco telepresence endpoint software (tc/ce), telepresence collaboration endpoint +1 more Cisco Touch 10 Device Downgrade Attack Vulnerability 6.5 Medium
- projen Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen 6.8 Medium