Lucene search
Veracode Vulnerability DatabaseVERACODE:46098HistoryApr 01, 2024 - 4:00 a.m.
Information Leakage
2024-04-0104:00:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
information leakage
vulnerability
memory allocation
bundling process
sensitive information
environment variables
secret files
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
@electron/packager is vulnerable to Information Leakage. The vulnerability is due to improper memory allocation during the bundling process, which can expose sensitive information such as environment variables or secret files.
Related
osv
osv
CVE-2024-29900
2024-03-29 16:15:08
nvd
nvd
CVE-2024-29900
2024-03-29 16:15:08
vulnrichment
vulnrichment
github
github
cve
cve
CVE-2024-29900
2024-03-29 16:15:08
cvelist
cvelist
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.0%
Related for VERACODE:46098