Junglewise Threat Intelligence

CVE-2024-31216: GO-2024-2859 - source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller

CVE-2024-31216 · Severity: low · CVSS 3.1 · Published 2024-06-04

Technologies: github.com/fluxcd/source-controller (Go). Vendors: Go.

Executive brief

source-controller leaks Azure Storage SAS token into logs in github.com/fluxcd/source-controller

Affected products

Go github.com/fluxcd/source-controller

Related threats

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositori
GO-2022-1071 - Denial of service in flux controllers in github.com/fluxcd modules