github.com/trufflesecurity/trufflehog

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Low 3.4

CVE-2024-43379

TruffleHog has a Blind SSRF in some Detectors

TruffleHog is a secrets scanning tool. Prior to v3.81.9, this vulnerability allows a malicious actor to craft data in a way that, when scanned by specific detectors, could trigger the detector to make an unauthorized request to an endpoint chosen by the attac…

trufflesecurity trufflehog github.com/trufflesecurity/trufflehog github.com/trufflesecurity/trufflehog/v3 Go

Aug 19, 2024