CVE-2023-48225

🗓️ 12 Dec 2023 21:08:15Reported by GoogleType

osv🔗 osv.dev👁 8 Views

LAF platform v1.0.0-beta.13 allows sensitive info leakage in privatization environmen

Reporter	Title	Published	Views	Family All 5
Veracode	Sensitive Information Disclosure	13 Dec 202309:56	–	veracode
NVD	CVE-2023-48225	12 Dec 202321:15	–	nvd
CVE	CVE-2023-48225	12 Dec 202321:15	–	cve
Prion	Code injection	12 Dec 202321:15	–	prion
Cvelist	CVE-2023-48225 Laf env causes sensitive information disclosure	12 Dec 202320:33	–	cvelist

Source	Link
github	www.github.com/labring/laf/security/advisories/GHSA-hv2g-gxx4-fwxp
github	www.github.com/labring/laf/blob/main/server/src/application/environment.controller.ts
github	www.github.com/labring/laf/blob/main/server/src/instance/instance.service.ts

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Dec 2023 21:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS39.1

EPSS0.00229