CVE-2023-27587

🗓️ 13 Mar 2023 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

ReadtoMyShoe web app error message exposes sensitive informatio

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for Generation of Error Message Containing Sensitive Information in Readtomyshoe_Project Readtomyshoe	15 Mar 202315:52	–	githubexploit
Circl	CVE-2023-27587	16 Mar 202308:24	–	circl
CNNVD	ReadtoMyShoe 安全漏洞	13 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-27587	13 Mar 202300:00	–	cvelist
Nuclei	ReadToMyShoe - Generation of Error Message Containing Sensitive Information	22 Jun 202605:20	–	nuclei
NVD	CVE-2023-27587	13 Mar 202322:15	–	nvd
OSV	CVE-2023-27587	13 Mar 202300:00	–	osv
Prion	Cross site request forgery (csrf)	13 Mar 202322:15	–	prion
Positive Technologies	PT-2023-21228 · Google · Google Cloud Api +1	13 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-27587	23 May 202502:25	–	redhatcve

NVD

Vulners

Node

readtomyshoe_project readtomyshoeRange<2023-03-13

[
  {
    "vendor": "rozbb",
    "product": "readtomyshoe",
    "versions": [
      {
        "version": "<= 0.2.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rozbb/readtomyshoe/commit/8533b01c818939a0fa919c7244d8dbf5daf032af
github	www.github.com/rozbb/readtomyshoe/security/advisories/GHSA-23g5-r34j-mr8g

Parameter	Position	Path	Description	CWE
title	request body	/api/add-article-by-text	Error reveals full Google Cloud TTS request URL including API key in the response	CWE-209
body	request body	/api/add-article-by-text	Error reveals full Google Cloud TTS request URL including API key in the response	CWE-209

17 Jun 2026 05:45Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.5 - 7.4

EPSS0.03857

SSVC