CVE-2024-56802 — Tapir allows DeployKey exposure
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write acces…
Published: 2024-12-31 · CVSS: 8.7 · CVSS 4.0
Tapir is a private Terraform registry. Tapir versions 0.9.0 and 0.9.1 are facing a critical issue with scope-able Deploykeys where attackers can guess the key to get write access to the registry. User must upgrade to 0.9.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7