| عنوان | microsoft/JARVIS has a sensitive information disclosure vulnerability |
|---|
| الوصف | This vulnerability affects all versions of microsoft/JARVIS to date, and there is a sensitive information leakage vulnerability. This security vulnerability will expose configuration files, source code, and other information deployed in public networks, including users' Open AI Keys. As of now, through asset mapping detection, more than 1,100 personal users or commercial products have deployed microsoft/JARVIS assets exposed to the Internet, which may be at risk.
Already published at https://github.com/eggdkk/Security_Test/blob/main/README.md |
|---|
| المصدر | ⚠️ https://github.com/eggdkk/Security_Test/blob/main/README.md |
|---|
| المستخدم | dkkk (UID 44836) |
|---|
| ارسال | 12/05/2023 04:52 PM (3 سنوات منذ) |
|---|
| الاعتدال | 27/05/2023 09:21 AM (15 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 230080 [Microsoft Jarvis Configuration File file الكشف عن المعلومات] |
|---|
| النقاط | 20 |
|---|