Skip to content
OpenAdvisories

Weakness (CWE)

CWE-214: Invocation of Process Using Visible Sensitive Information

Base Incomplete

A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.

Source: MITRE CWE-214

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2024-4254 Public exploit

    Secrets Exfiltration in gradio-app/gradio

    The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code…

    gradio-app gradio-app/gradio