medium5.3
CVE-2021-29642
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.
Impact
GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gistpad Project | Gistpad | before 0.2.7 |