CVE-2026-104892
2026-10-05
16h17 +00:00
16h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys and further escalate their privileges. This issue is fixed in 1.4.0.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Plaintext Storage of a Password The product stores a password in plaintext within resources such as memory or files. |
