Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go…
Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can read plaintext secrets and matching lines to obtain discovered credentials.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Gitleaks
- Product
- gitleaks
- CVSS v3.1
- 3.3 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-732
- NVD status
- Received
Why it ranks 2 (Routine)
- No intrinsic risk signals yet; rank reflects source class and recency only.
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.