Information disclosure

2023-06-1319:15:00

PRIOn knowledge base

www.prio-n.com

sspanel-uim

interface access

user information

information disclosure

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.6%

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.

CPENameOperatorVersion
sspanel-uimeq2023.3

CPE	Name	Operator	Version
	sspanel-uim	eq	2023.3

References

docs.google.com/document/d/1TbHYGW65o1HBZoDf0rUDQMHPJE6qfQAvqdFv1DYY4BU/edit?usp=sharing

github.com/AgentY0/CVE-2023-34965

github.com/Anankke/SSPanel-Uim