Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h2hv-xmr8-g377

Опубликовано: 02 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter.

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter.

EPSS

Процентиль: 41%
0.00188
Низкий

8.7 High

CVSS4

Дефекты

CWE-200

Связанные уязвимости

nvd
4 месяца назад

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter.

EPSS

Процентиль: 41%
0.00188
Низкий

8.7 High

CVSS4

Дефекты

CWE-200