CVE-2024-43379

CVE-2024-43379 affects TruffleHog, a secrets scanning tool, prior to version 3.81.9, allowing an attacker to craft data that, when scanned by specific detectors, can trigger unauthorized GET requests to an attacker-chosen, unauthenticated endpoint with side effects. The vulnerability has a CVSS score of 3.1 (LOW), indicating a network attack vector with high attack complexity, requiring user interaction, and resulting in low integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat level.