CVE-2024-48310

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information...

CVE-2024-48310

creationtimestamp| type| source ---|---|--- 2025-01-28 00:33:40+00:00| seen| https://schleuss.online/users/vulnbot/statuses/113903168246537371 2025-01-28 03:17:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lgrildjdr323 2025-01-28 22:12:28+00:00| seen|...

CVE-2024-48310

AutoLib Software Systems OPAC v20.10 is vulnerable to secret disclosure because multiple API keys are exposed within the source code, specifically in the main.js file. An attacker can obtain these keys and use tools like curl , Postman , or custom scripts to craft unauthorized requests to the bac...

CVE-2024-48310

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers may use these keys to access the backend API or other sensitive information...