Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/26 12:00 a.m.•8 views

CVE-2026-100710: Exposure of Sensitive Information to an Unauthorized Actor

Froxlor through 2.3.10 does not filter sensitive columns from API responses: Domains::get, Domains::listing, SubDomains::get, and the admin branch of SubDomains::listing perform a wildcard SELECT over the paneldomains table and return the row unmodified, including the paneldomains.dkimprivkey...

6.9CVSS5.9AI score0.00244EPSS
SaveExploits0References2
Rows per page
Query Builder