Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxmf-v24g-56jq

Опубликовано: 12 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 6.9

Описание

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things about the target application which may help in further investigation and exploitation.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things about the target application which may help in further investigation and exploitation.

EPSS

Процентиль: 37%
0.0016
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-200
CWE-732

Связанные уязвимости

nvd
около 1 года назад

Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things about the target application which may help in further investigation and exploitation.

EPSS

Процентиль: 37%
0.0016
Низкий

6.9 Medium

CVSS4

Дефекты

CWE-200
CWE-732