CVE-2026-104892
2026-10-05
16h17 +00:00
16h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Plaintext Storage of a Password The product stores a password in plaintext within resources such as memory or files. |
