Описание
Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature.
Ссылки
- Third Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 4.3.4 (исключая)
cpe:2.3:a:synck:mailform_pro_cgi:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00042
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-209
Связанные уязвимости
CVSS3: 3.7
github
9 месяцев назад
Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature.
EPSS
Процентиль: 13%
0.00042
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-209