Common Weakness Enumeration
CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere
Description
The product stores a CVS, git, or other repository in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-527 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-x6gv-2rvh-qmp6 | - | CRITICAL | - |
m00nl1ght-dev/steam-workshop-deploy: Exposure of Version-Control Repository to an Unauthorized Control Sphere and Insufficiently Protected Credentials |
2025-10-27 |
| GHSA-gg2g-m5wc-vccq | CVE-2021-21423 | HIGH |
Rebuild-bot workflow may allow unauthorised repository modifications |
2024-10-21 |