CVE-2023-1974 HIGH

CVE-2023-1974: Exposure of Sensitive Information Through Metadata in answerdev/answer

Vendor Answerdev
Product answerdev/answer
Weakness CWE-1230
Published April 11, 2023
Last update February 7, 2025
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

Key dates

02Disclosure timeline

April 11, 2023 CVE published
February 7, 2025 Record updated