1 matches found
CVE-2022-24837: Exposure of Sensitive Information to an Unauthorized Actor
HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enumerable filename after the upload, resulting in potential information leakage of uploaded documents. This is especially relevant for private notes an...
5.3CVSS6AI score0.01126EPSS
SaveExploits0References3
20