CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Retrieve Embedded Sensitive Data.This issue affects Stacks Mobile App Builder: from n/a through <= 5.2.3.
Explanation of Vulnerability in Simple Terms
Stacks Mobile App Builder versions 5.2.3 and earlier expose sensitive information to unauthenticated attackers over the network. An attacker can read confidential data without needing valid credentials or user interaction. The vulnerability affects all versions from release through 5.2.3. Update to a version newer than 5.2.3 to remediate.
What an attacker can do
Read sensitive information from the app builder without authentication.
Potential impact on your site
Confidential data stored in or processed by the app builder is exposed to anyone on the network.
Conditions required to exploit
Network access to the affected Stacks Mobile App Builder instance; no authentication required.
Key dates
External resources
Related vulnerabilities
