New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

2024 Audit - SEC-01-015 WP1: Potential Race Condition in Source Creation #7292

Open

zenmonkeykstop opened this issue Oct 29, 2024 · 0 comments

Labels

2024 audit recommendation

Contributor

zenmonkeykstop commented Oct 29, 2024

A potential race condition was identified in the SecureDrop platform source creation
process. The create_source_user function does not prevent simultaneous creation of
sources with identical journalist designations. This can lead to multiple sources having
the same designation, causing confusion or information leakage.

We will be investigating this further.

zenmonkeykstop added the 2024 audit recommendation label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment