Lucene search

VulDBCVE-2024-8571

HistorySep 08, 2024 - 8:15 a.m.

CVE-2024-8571

2024-09-0808:15:13

CWE-209

VulDB

web.nvd.nist.gov

vulnerability

erjemin roll_cms

information exposure

rolling releases

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS4

5.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

Confidence

High

EPSS

0.001

Percentile

50.5%

JSON

A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9. It has been classified as problematic. This affects an unknown part of the file roll_cms/roll_cms/views.py. The manipulation leads to information exposure through error message. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Affected configurations

Nvd

Node

erjeminroll_cmsRange<2024-08-31

VendorProductVersionCPE
erjeminroll_cms*cpe:2.3:a:erjemin:roll_cms:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
erjemin	roll_cms	*	cpe:2.3:a:erjemin:roll_cms::::::::

CNA Affected

[
  {
    "vendor": "erjemin",
    "product": "roll_cms",
    "versions": [
      {
        "version": "1484fe2c4e0805946a7bcf46218509fcb34883a9",
        "status": "affected"
      }
    ]
  }
]

References

github.com/erjemin/roll_cms/issues/1

vuldb.com/?ctiid.276801

vuldb.com/?id.276801

vuldb.com/?submit.400796

CVSS2

2.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS4

5.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

Confidence

High

EPSS

0.001

Percentile

50.5%

JSON

Related for CVE-2024-8571