Vulnerability advisory
GO-2024-3265
Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis
Also known as CVE-2024-52009GHSA-gppm-hq3p-h4rp
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 0.30.0 | 0.30.0 |
Description
Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis
References
- Advisorygithub.com/runatlantis/atlantis/security/advisories/GHSA-gppm-hq3p-h4rp ↗
- Fixgithub.com/runatlantis/atlantis/commit/0def7d3fb74aabb75570554692b053950cde02e1 ↗
- Fixgithub.com/runatlantis/atlantis/pull/4667 ↗
- Reportgithub.com/runatlantis/atlantis/issues/4060 ↗
- Webargo-cd.readthedocs.io/en/stable/operator-manual/security ↗
- Webgithub.com/runatlantis/atlantis/releases/tag/v0.30.0 ↗