Red Hat Developer Hub
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:red_hat_developer_hub:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Red Hat Developer Hub (49b3e454-40eb-5624-b78d-261f0ba872a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-6944 |
vulnerable | 2026-06-08 06:21:56.422342 |
Rhdh: catalog-import function leaks credentials to frontend
MEDIUM (5.7)
A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.
Published: 2024-01-04T10:02:38.088Z
Updated: 2025-11-20T18:07:14.520Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.