CVE-2021-29642

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens

published March 30, 2021

CVSS
—
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00944 · 60.7th percentile
Published
2021-03-30T18:48Z
EPSS history
Timeline
  • 30 MAR 18:48Z
    GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens
    cvelistv5