漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Potential Secrets being logged to disk in CVEProject/cve-services
Vulnerability Description
The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the `org.conroller.js` code would erroneously log user secrets. This has been resolved in commit `46d98f2b` and should be available in subsequent versions of the software. Users of the software are advised to manually apply the `46d98f2b` commit or to update when a new version becomes available. As a workaround users should inspect their logs and remove logged secrets as appropriate.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过日志文件的信息暴露
Vulnerability Title
cve-services 日志信息泄露漏洞
Vulnerability Description
cve-services是一个开源项目。用于操作 CVE 服务 API。 cve-services 1.1.1 版本及之前版本存在安全漏洞，该漏洞源于 org.conroller.js 代码会错误地记录用户机密。
CVSS Information
N/A
Vulnerability Type
N/A