mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 16:47:53 +02:00
936 B
936 B
CVE-2022-3474
Description
A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3.
POC
Reference
No PoCs from references.