CVE-2024-31298

Опубликовано: 10 апр. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User Spam Remover: from n/a through 1.0.

Ссылки

https://patchstack.com/database/vulnerability/user-spam-remover/wordpress-user-spam-remover-plugin-1-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/user-spam-remover/wordpress-user-spam-remover-plugin-1-0-sensitive-data-exposure-via-log-file-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joelhardi:user_spam_remover:*:*:*:*:*:wordpress:*:*

Версия до 1.1 (исключая)

EPSS

Процентиль: 71%

0.00693

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

GHSA-x8m7-f4f6-46c2

CVSS3: 5.3

github

почти 2 года назад

Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User Spam Remover: from n/a through 1.0.

EPSS

Процентиль: 71%

0.00693

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-532