Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-63706C482162E59589E33FA38DC5C8A6
HistoryJun 25, 2024 - 12:00 a.m.

Aimeos HTML client may potentially reveal sensitive information in error log

2024-06-2500:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
6
aimeos html client
sensitive information
error log
debug information
environment variables
software

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.1%

Debug information can reveal sensitive information from environment variables in error log

Affected configurations

Vulners
Node
packagistai-client-htmlRange2024.04.1
OR
packagistai-client-htmlRange<2024.04.7
OR
packagistai-client-htmlRange2023.04.1
OR
packagistai-client-htmlRange<2023.10.15
OR
packagistai-client-htmlRange2022.04.1
OR
packagistai-client-htmlRange<2022.10.13
OR
packagistai-client-htmlRange2021.10.1
OR
packagistai-client-htmlRange<2021.10.22
VendorProductVersionCPE
packagistai-client-html*cpe:2.3:a:packagist:ai-client-html:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

0

Percentile

9.1%

Related for GITLAB-63706C482162E59589E33FA38DC5C8A6