CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AppMySite AppMySite – Create an app with the Best Mobile App Builder.This issue affects AppMySite – Create an app with the Best Mobile App Builder: from n/a through 3.11.0.
Explanation of Vulnerability in Simple Terms
AppMySite versions up to 3.11.0 expose sensitive information that can be accessed over the network without authentication. An attacker can retrieve this data directly without needing to log in or interact with a user. The exposure is limited to information disclosure; the attacker cannot modify data or disrupt service. Update to a version newer than 3.11.0 to resolve this issue.
What an attacker can do
Read sensitive information from the application without logging in.
Potential impact on your site
Sensitive data may be exposed to unauthorized parties; confidentiality is at risk.
Conditions required to exploit
Network access to the AppMySite instance; no authentication required.
Key dates
External resources
Related vulnerabilities
