Vulnerabilities > CVE-2022-39292 - Sensitive Information Uncleared During Hardware Debug Flows vulnerability in Slack Morphism Project Slack Morphism

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

slack-morphism-project

CWE-1258

NVD

Published: 2022-10-10

Updated: 2022-10-11

Summary

Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitive URLs for Slack webhooks that contain private information. The problem is fixed in version 1.3.2 which redacts sensitive URLs for webhooks. As a workaround, people who use Slack webhooks may disable or filter debug logs.

Vulnerable Configurations

Part	Description	Count
Application	Slack_Morphism_Project Slack Morphism Project Slack Morphism 0.1.0 Slack Morphism Project Slack Morphism 0.1.1 Slack Morphism Project Slack Morphism 0.2.0 Slack Morphism Project Slack Morphism 0.2.1 Slack Morphism Project Slack Morphism 0.2.2 Slack Morphism Project Slack Morphism 0.2.3 Slack Morphism Project Slack Morphism 0.2.4 Slack Morphism Project Slack Morphism 0.2.5 Slack Morphism Project Slack Morphism 0.2.6 Slack Morphism Project Slack Morphism 0.2.7 Slack Morphism Project Slack Morphism 0.2.8 Slack Morphism Project Slack Morphism 0.3.0 Slack Morphism Project Slack Morphism 0.3.1 Slack Morphism Project Slack Morphism 0.4.0 Slack Morphism Project Slack Morphism 0.5.0 Slack Morphism Project Slack Morphism 0.5.5 Slack Morphism Project Slack Morphism 0.6.0 Slack Morphism Project Slack Morphism 0.6.1 Slack Morphism Project Slack Morphism 0.7.0 Slack Morphism Project Slack Morphism 0.7.3 Slack Morphism Project Slack Morphism 0.8.0 Slack Morphism Project Slack Morphism 0.8.1 Slack Morphism Project Slack Morphism 0.8.2 Slack Morphism Project Slack Morphism 0.8.3 Slack Morphism Project Slack Morphism 0.8.4 Slack Morphism Project Slack Morphism 0.8.5 Slack Morphism Project Slack Morphism 0.9.0 Slack Morphism Project Slack Morphism 0.10.0 Slack Morphism Project Slack Morphism 0.11.0 Slack Morphism Project Slack Morphism 0.12.0 Slack Morphism Project Slack Morphism 0.14.0 Slack Morphism Project Slack Morphism 0.15.0 Slack Morphism Project Slack Morphism 0.16.0 Slack Morphism Project Slack Morphism 0.17.0 Slack Morphism Project Slack Morphism 0.18.0 Slack Morphism Project Slack Morphism 0.19.0 Slack Morphism Project Slack Morphism 0.20.0 Slack Morphism Project Slack Morphism 0.21.0 Slack Morphism Project Slack Morphism 0.22.0 Slack Morphism Project Slack Morphism 0.23.0 Slack Morphism Project Slack Morphism 0.24.0 Slack Morphism Project Slack Morphism 0.25.0 Slack Morphism Project Slack Morphism 0.26.0 Slack Morphism Project Slack Morphism 0.27.0 Slack Morphism Project Slack Morphism 0.28.0 Slack Morphism Project Slack Morphism 0.29.0 Slack Morphism Project Slack Morphism 0.30.0 Slack Morphism Project Slack Morphism 0.31.0 Slack Morphism Project Slack Morphism 0.32.0 Slack Morphism Project Slack Morphism 0.33.0 Slack Morphism Project Slack Morphism 0.34.0 Slack Morphism Project Slack Morphism 0.35.0 Slack Morphism Project Slack Morphism 0.36.0 Slack Morphism Project Slack Morphism 0.37.0 Slack Morphism Project Slack Morphism 0.38.0 Slack Morphism Project Slack Morphism 0.39.0 Slack Morphism Project Slack Morphism 0.40.0 Slack Morphism Project Slack Morphism 0.41.0 Slack Morphism Project Slack Morphism 1.0.0 Slack Morphism Project Slack Morphism 1.1.0 Slack Morphism Project Slack Morphism 1.2.0 Slack Morphism Project Slack Morphism 1.2.1 Slack Morphism Project Slack Morphism 1.2.2 Slack Morphism Project Slack Morphism 1.3.0	64

Common Weakness Enumeration (CWE)

CWE-1258 - Sensitive Information Uncleared During Hardware Debug Flows

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References