Observable Discrepancy in GitHub repository healthchecks/healthchecks prior to v2.6.
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
Link | Tags |
---|---|
https://huntr.dev/bounties/208a096f-7986-4eed-8629-b7285348a686 | issue tracking patch exploit third party advisory |
https://github.com/healthchecks/healthchecks/commit/359edbd2709e27b60687061a32e19322bc971c1f | third party advisory patch |