Skip to content

Commit

Permalink
Merge pull request #11 from co-cddo/tArMarp-patch-1
Browse files Browse the repository at this point in the history
Update variables.tf to include a new acknowledgement, and remove those acknowledgements not connected VRS
  • Loading branch information
ncsc-alex authored Nov 20, 2024
2 parents 1d51d0f + d5f2702 commit fee8738
Showing 1 changed file with 3 additions and 28 deletions.
31 changes: 3 additions & 28 deletions cdn/variables.tf
Original file line number Diff line number Diff line change
@@ -1,34 +1,9 @@
locals {
acknowledgements = [
[
"Jonathan Leitschuh",
"2020-02-11",
"Potential MITM using HTTP to resolve some GOV.UK Pay Maven dependencies"
],
[
"Artem Smotrakov",
"2021-07-21",
"Potential timing attack on GOV.UK Pay Webhook signature checks"
],
[
"Mohd.Danish Abid",
"2022-01-17",
"Potential directory security misconfiguration on gdscareers.gov.uk"
],
[
"Ayush Juneja",
"2022-05-27",
"Potential vulnerability with GOV.UK contact forms"
],
[
"Michael Minchinton",
"2022-06-06",
"Cached URLs linking to sensitive files on a GOV.UK service"
],
[
"Tom Samson",
"2022-06-06",
"Potential vulnerability to Log4j exploit in GOV.UK hosted application"
"Finley McGregor",
"2024-10-22",
"Potential SQL injection vulnerability in multiple GOV.UK sites"
]
]

Expand Down

0 comments on commit fee8738

Please sign in to comment.