Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Degamisu

#34161of 53,632
7.6Total CVSS
Vulnerabilities · 1
PT-2024-20535
7.6
2024-02-02
Open-Irs · Open-Irs · CVE-2024-24757
**Name of the Vulnerable Software and Affected Versions** open-irs versions prior to 1.0.1 **Description** The issue concerns an accidentally uploaded `.env` file when working with git actions, which contains sensitive information. This problem has been fixed in version 1.0.1. The solution involves discontinuing all sensitive keys and turning them into secrets. **Recommendations** For versions prior to 1.0.1, update to version 1.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the sensitive keys in the `.env` file until the update is applied.