CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Olive Themes Olive One Click Demo Import allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Olive One Click Demo Import: from n/a through 1.1.2.
Explanation of Vulnerability in Simple Terms
Olive One Click Demo Import versions up to 1.1.2 expose sensitive information that can be accessed over the network without authentication. An attacker can retrieve data that should not be publicly visible, such as configuration details or user information. Update to a version newer than 1.1.2 to resolve this issue.
What an attacker can do
Read sensitive information from the plugin without logging in.
Potential impact on your site
Sensitive data may be exposed to anyone on the internet, potentially revealing configuration or user details.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
