Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle
Vulnerability Description
UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig (safe for client use) and workerConfig (server-only, contains sensitive data) from the same module. Due to pages/incidents.tsx importing and using workerConfig directly inside client-side component code, the entire workerConfig object was included in the client-side JavaScript bundle served to all visitors. This issue has been patched via commit 377a596.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
UptimeFlare 信息泄露漏洞
Vulnerability Description
UptimeFlare是lyc8503个人开发者的一个基于云服务的网站可用性监控与状态页面软件。 UptimeFlare存在信息泄露漏洞，该漏洞源于客户端代码直接导入服务器端配置，可能导致敏感数据泄露。
CVSS Information
N/A
Vulnerability Type
N/A